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Here's  all  you  have  to  do: 

VISIT  NETWORK  WORLD’S  MEDIA  LOUNGE  AT  www.nwfusion.com/medialounge. 

CLICK  ON  THAT  COOL  BUTTON  THAT  SAYS  “WELCOME!  WIN  A  LOUNGE  CHAIR” 

COMPLETE  THE  FORM  THAT  APPEARS  ON  YOUR  SCREEN  (DON’T  WORRY,  IT’S  ONLY 
ABOUT  7  OR  8  LINES  LONG) 

CLICK  THE  BUTTON  THAT  SAYS  “SUBMIT” 


That’s  it.  Two 


minutes  and  you  suddenly  might 


be  lounging 


in  comfort. 


What  is  the  Network  World  Media  Lounge? 

It  is  a  site  designed  specifically  for  you  —  high-tech  marketing  and  media 
professionals.  Its  mission  is  to  give  you  the  tools  you  need  to  make  the  right 
marketing  and  media  decisions  in  an  environment  that  is  no  pressure,  non¬ 
technical  and,  yes  even  a  little  bit  fun. 


The  site  is  loaded  with  information  from  Network  World’s  complete  1997 
Media  Kit  to  our  press  room  to  our  global  support  center.  But  the  site 
also  serves  another  purpose.  It’s  a  place  for  you  to  ask  questions,  share 
insights,  brainstorm,  or  even  just  to  gripe  when  you  are  having  a  bad  day. 


So  take  a  minute  or  two  and  visit  the  Media  Lounge  at 

www.nwfusion.com/mediaiounge.  And  cross  your  fingers  that 
you’ll  be  our  lucky  winner! 


Official  Rules 

No  purchase  necessary  to  enter  or  win.  Prize  is  guaranteed  to  be  awarded. 

Complete  online  registrations  form  at  www.nwfusion.com/medialounge.  Only  one  entry  per  individual.  Entries  must  be  received  by  March  15, 1997.  Winner  will  be  randomly  selected  and 
will  be  notified  by  phone,  mail  or  email  immediately  following  the  drawing.  Prize  is  nontransferable  and  no  substitution  or  cash  equivalent  is  allowed. 

No  responsibility  is  assumed  for  lost,  misdirected,  illegible,  or  late  entries  by  mail.  Entry  (and  acceptance  of  prize)  constitutes  permission  to  use  winner's  name  and  likeness  for  publicity 
and  advertising  purposes  without  further  compensation. 

Sweepstakes  open  only  to  advertising  agency  and  corporate  personnel  who  are  involved  for  the  purchase  of  advertising  space  who  are  residents  in  and  of  the  continental  U.S.  and  18  years 
of  age  or  older  as  of  January  1, 1997.  Employees  of  Network  World,  Inc.,  its  parent  company,  affiliates,  subsidiaries,  advertising  and  promotion  agencies  are  ineligible.  This  offer  void  where 
prohibited  or  restricted  by  law,  and  subject  to  all  federal,  state  and  local  laws  and  regulations. 

For  the  name  of  the  winner,  send  a  stamped,  sell-addressed  envelope  to:  Network  World,  Inc.,  "Media  Lounge’  Sweepstakes,  161  Worcester  Road.  Framingham,  MA  01701  or  visit  Network 
World's  Media  Lounge  at  www.nwtusion.com/medialounge  after  March  31, 1997. 
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TELECOM  REFORM:  ONE  VERR  LATER 
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Carriers,  users  and  the  courts  need  to  act 

By  David  Rohde 

Washington,  D.C. 

It  has  been  nearly  a  year  since  the  Telecommunications  Act  of 
1996  became  law.  So  why  does  hardly  anyone  have  a  choice  of  carriers 
for  local  phone  service?  And  why  aren’t  the  regional  Bell  operating 
companies  carrying  long-distance  calls  within  their  own  regions? 

Potential  new  local  carriers  say  the  explanation  is  simple:  RBOCs 
and  GTE  Corp.  are  more  interested  in  bottling  up  local  competition 
in  courtrooms  than  grabbing  the  long-distance  prize. 

But  users  and  analysts  see  it  another  way.  They  say  most  potential 
local  competitors  are  chicken.  Many  long-distance  carriers  are 
hesitant  to  commit  big  dollars  to  local  telephony  buildouts  —  partly 
out  of  fear  of  giving  RBOCs  the  legal  ammunition  they  need  to  begin 
in-region  long  distance.  And  cable  companies  have  virtually  dropped 
out  of  the  local  telephony  sweepstakes. 

If  they  are  right,  there  is  a  lot  of  work  ahead  for  everybody  before 
telecom  reform  in  local  service  and  other  markets  becomes  more 
reality  than  hype.  “I  don’t  think  we’ll  see  even  pockets  of  meaningful 
competiuon  until  1998,”  says  David  Goodtree,  who  heads  the  Telecom 
Strategy  Service  at  Forrester  Research,  Inc.  in  Cambridge,  Mass. 

So  what  needs  to  happen  in  order  to  realize  the  promise  of 
telecom  reform? 

See  Reform,  page  64 


A  CURE  FOR  LAGGING  CARRIER 
COMPETITION 

Telecom  doctors  prescribe  the 

following  steps  to  get  telecom 

reform  off  its  sickbed: 

Local  carriers 

•  Meet  regulatory  deadlines  for  inter¬ 
connection,  number  portability,  etc. 

Long-distance  carriers 

•  Invest  more  heavily  in  real  local 
facilities. 

•  Partner  with  proven  local  providers, 
not  hesitant  cable  companies. 

Users 

•  Find  facilities-based  local  com¬ 
petitors;  do  not  count  on  resale. 

FCC 

•  Lower  access  fees  gradually  but 
according  to  a  specific  schedule. 

•  Avoid  big  universal  service  subsidies 
that  would  be  passed  along  to  end  users. 

Courts 

•  Rule  one  way  or  the  other  on  the 
FCC’s  guidelines  -  but  do  it  quickly. 


NT  shops  stew  over  migration  plan 


By  Christine  Burns 

Redmond,  Wash. 

Instead  of  an  elevator  ride 
from  NT  3.51  to  the  upcoming 
5.0,  Microsoft  Corp.  wants  server 
customers  to  take  the  stairs  — 
pushing  them  to  first  climb  up  to 


NT  4.0,  and  then  step  up  once 
again  to  5.0  when  it  arrives  later 
this  year  or  early  next  year. 

An  estimated  70%  to  80%  of 
NT  Server  users  are  still  on  3.51, 
and  many  are  wary  of  4.0  due  to 
stability  problems.  But  Microsoft 


has  not  budged. 

“We  are  not  thinking  about 
3.51.  We  are  not  sitting  here  test¬ 
ing  3.51  and  5.0  systems  mixed,” 
saidjim  Allchin,  senior  vice  pres¬ 
ident  of  Microsoft’s  Desktop  and 
Business  Systems  Division. 

“So  users  should  buy  and 
install  NT  4.0  because  we  are 
spending  a  great  deal  of  time 
making  that  migration  [to  NT 
5.0]  easy,”  he  said. 

Users  are  not  pleased  and 
See  Migration,  page  13 


Cisco  rivals  make 

By  Tim  Greene, 

Michael  Cooney  and  Jim  Duffy 

3Com  Corp.,  Cascade  Com¬ 
munications  Corp.  and  IBM 
tomorrow  will  announce  a  joint 
IP  switching  plan  for  tying 
together  LANs  via  wide-area 
frame  relay  and  ATM  networks 
without  using  routers. 

The  switched  architecture  is 
designed  to  reduce  router  con¬ 
gestion  that  clogs  Internet  access 
and  to  guarantee  that  delay- 


NT  MAKES  A  STRONG  SHOWING 

1996  worldwide  NOS  market  shares 

Windows  NT 
Server  3.51  and  4.0 


Microsoft’s  NT  Server  4.0 
accounted  for  about  290,000 
of  the  725,000  copies  of  NT  Server 
shipped  worldwide  last  year. 


Unix 


OS/2 


NetWare  3.X  and  4.X 


SOURCE:  IDC,  FRAMINGHAM.  MASS. 


Based  on  a  total  of  2.67  million  copies  shipped. 


Cisco  probes 
voice  market 


Voice  to  run  over  routers,  switches  and  remote  access  gear. 


By  Jim  Duffy 

San  Jose,  Calif. 

If  your  voice  carries,  Cisco  Sys¬ 
tems,  Inc.  wants  to  carry  your 
voice. 

Over  the  next  12  months, 
sources  said,  the  company  plans 
to  outfit  its  routers,  switches  and 
remote  access  gear  with  products 
to  turn  your  data  internetwork 
into  an  integrated  voice/data 
speedway. 

By  extending  voice  support 
across  frame  relay,  ATM,  IP  and 
Ethernet,  Cisco  believes  it  can 
offer  a  higher  performance, 
lower  cost  voice/ data  infrastruc- 


IS0C  takes  shot 
at  governing 
the  Internet 

By  Charles  Bruno 

Fearing  the  old  adage  that 
those  who  are  unable  to  govern 
themselves  will  be  governed  by 
others,  the  Internet  Society 
(ISOC)  next  month  is  expected 
to  launch  an  initiative  to  bring 
together  users,  service  providers, 
standards  organizations  and  gov¬ 
ernment  bodies  to  set  policies 
for  the  ’Net  worldwide. 

See  ISOC,  page  65 


IP  switching  bid 

sensitive  applications  such  as  IP 
voice  get  the  priority  they  need 
to  maintain  quality. 

It  would  also  improve  intra¬ 
net  support  for  applications  such 
as  videoconferencing  and  white¬ 
boarding  that  routers  do  not 
handle  well. 

Under  the  plan,  a  modified 
version  of  IP  switching  pioneer 
Ipsilon  Networks,  Inc.’s  IPsilon 
Flow  Management  Protocol 
See  Rivals,  page  12 


move 

traffic  on  LANs 
•  White  papers  from  companies  that 
already  sell  gear  for  integrating  voice 
and  data  traffic 


Enter  this  number  in  the  DocFinder  box 
on  the  home  page. 


http://www.nwFusion.com 


ture  than  traditional  time-divi¬ 
sion  multiplexer  suppliers. 

Cisco  is  also  assessing  its 
chances  of  breaking  into 
—  of  all  places  —  the  PBX  mar¬ 
ket,  which  has  long  been  the 
domain  of  vendors  such  as 
Northern  Telecom,  Inc.  and 
Lucent  Technologies,  Inc.  Inter¬ 
nally,  Cisco  has  assembled  a  voice 
marketing  team  charged  with 
rationalizing  the  company’s 
entry  into  this  arena,  and  identi¬ 
fying  obstacles  and  adversaries. 

“The  PBX  market  itself  is  sev¬ 
eral  billion  dollars  a  year  just  in 
See  Cisco,  page  65 


)rgef  technobabble.  Solid 
management  solves  the  probien 

| «  The  new  symmetrical 
security  model 
10  steps  to  securing  your 
Web  site 
Authentication: 

From  passwords  to  retina 
The  Holy  Grail  of  single 
sign-on 

Sage  advice  from  Citibank's 
security  czar 


Remember  when  all  the  pieces  fit  together  right  out  of  the  box! 
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iVe  do. 


Cabletron,  A  simpler  way  to  work. 


Today’s  enterprise  networks  are  such  a  complex 
maze  of  disparate  parts  that  it  can  be  difficult  to 
keep  the  system  running,  let  alone  stay  focused  on 
the  big  picture.  Wouldn’t  it  be  great  to  have  a  flexi¬ 
ble,  seamless  solution  that  ensures  what  you  buy 
today  works  with  what  you’ll  require  tomorrow? 

Enter  Cabletron.  We  help  you  see  the  finished 
picture  before  another  piece  goes  into  place. 

We  believe  in  compatible  migration  for  the  life  of 
your  network,  protecting  investments  even  in  the  face 
of  ever-changing  business  demands.  Our  vision 
remains  sharp  through  the  industry’s  strongest  invest¬ 
ment  in  R&D  combined  with  select  technology 
acquisitions  that  sensibly  and  seamlessly  mesh  with 
our  product  strategy.  Were  with  you  from  the  desk¬ 
top  to  the  data  center,  out  to  the  wide  area/ remote 
access  environment  (ISDN,  frame  relay,  ATM)  and 
across  the  full  spectrum  of  enterprise  management 
software.  And  it’s  all  backed  by  our  legendary  com¬ 
mitment  to  service  and  support,  ensuring  picture- 
perfect  assistance— now  and  for  the  long  run. 

So  whether  you’re  laying  out  your  company’s 
strategic  network  puzzle  or  just  piecing  together  this 
year’s  bandwidth  needs,  Cabletron  truly  does  offer  a 
simpler  way  to  work. 

For  more  information  on  how  we  can  help 
simplify  your  view  of  networking,  call  603-337-0930 
or  visit  us  on  the  Web  at  www.cabletron.com. 
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The  Complete  Networking  Solution™ 
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Digital  Subscriber  Lines,  while  everyone  seems  to  be  talking  about  them,  we’ve  got  them  working.  For  real  customers.  Right  now. 
We  manage  integrated  services  that  allow  telecommuters  intranet  access  and  give  corporate  users  Internet  access  at  high 
speeds.  We  take  care  of  the  equipment,  network  services,  and  the  installation  so  you  can  take  advantage  of  the  new 
Speeds.  For  the  hard  facts  see  the  INTERPRISE  web  page  at  http://www.uswest.com. 


We're  INTERPRISE  Networking  Services  from  US  WEST.  Remember,  no  pushing  and  shoving. 


NETWORKING  SERVICES  FROM  US  WEST 


INTEL  BRANCHES  OUT 


The  chip  king  is  making  a  name 
for  itself  in  the  network 
equipment  market. 
Page  25. 


The  SOCKS  speci¬ 
fication  offers  an 
interesting  alter¬ 
native  to  today’s 
firewalls.  Page  36. 
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T  U  R  E  S 

Special  Section:  Security.  Keeping  your 
enterprise  net  secure  is  as  much  a  man¬ 
agement  challenge  as  a  technical  one. 
Find  out  how  to  meet  it  head-on  with  this 
steely  collection  of  current  security  trends, 
models  and  practical  advice.  Coverage 

begins  on 
page  42. 


Review:  NetVision’s 
Synchronicity  for  NT  may 
be  the  ticket  needed  to  admit 
NT  users  into  Novell’s  NDS.  Page  51. 
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This  Week 


Only  on  Fusion 


>  A  consortium  of  Internet  service  providers  and 
high-tech  vendors  last  week  said  there  is  no 
proof  that  Internet  usage  is  beginning  to  degrade 
local  telephone  service.  It  also  claimed  that  'Net 
surfers  actually  mean  more  revenue  for  the  telcos. 
Download  the  report.  DocFinder:  0424 

’  Microsoft  and  Spyglass  last  week  ended  a  tiff  over 
browser  royalties  and  agreed  to  work  on  new  Web 
devices.  DocFinder:  0425 

News+ 

'  Internet.  Grab  the  Internet  International  Ad 
Hoc  Committee's  report  on  expanding  the  pool 
of  top-level  domain  names,  then  read  a  feminist 
critique  of  both  the  committee  and  its  parent, 
the  Internet  Society.  DocFinder:  0423 

■  Telecom  reform.  Browse  copies  of  FCC  orders 
and  reports  related  to  local-loop  competition. 

DocFinder:  0421 

Switched  Ethernet.  With  per-port  pricing 
dropping,  now  might  be  the  time  to  look  at  Ethernet 
switches  on  the  LAN.  Download  a  primer  on  the 
topic.  DocFinder:  0422 

NetRef 

Security.  Read  our  special  report  on  securing 
the  enterprise  net  (page  42),  then  come  online 
for  a  firewall  buyer's  guide  and  a  Web  security 
checklist.  DocFinder:  0420 

Directory  Services.  Check  out  papers  about 
directory  services  from  Novell  and  Microsoft. 

DocFinder:  0402 
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News 


News  briefs,  January  27, 1997 


Novell  back  on  electronic  commerce  track 

S3  ( /  mtrary  to  industry  speculation  that  support  within  Novell, 

Inc.  foi  electronic  commerce  was  waning  because  of  missed  deliv- 
e  i  v  dates,  company  officials  last  week  decided  to  forge  ahead  with 
plans  for  IntranetWare  electronic  commerce  add-ons  (ATkJan. 

1 3,  page  1 ).  Stewart  Nelson,  general  manager  for  Novell’s  Applica- 
f  ion  Division,  said  users  will  see  beta  code  for  NetWare  Loadable 
Module-based  products  based  on  Open  Market,  Inc.’s  OM-Secu- 
re Link  transactional  technology  this  quarter.  Additionally,  Novell 
in  the  coming  weeks  will  announce  another  electronic  commerce- 
related  partnership. 

Chatting  up  Netscape 

@  Underan  agreement  announced  last  week,  ichat,  Inc.  will  inte¬ 
grate  itsclientandserversoftwarewith  Netscape  Communica¬ 
tions  Corp.’s  Communicator  groupware  client  and  SuiteSpot 
server  line  to  allow  for  real-time  chat  sessions  over  the  Internet. 
Netscape,  for  its  part  of  the  deal,  will  recommend  ichat’s  products 
to  its  customers. 

Also  last  week,  Netscape  announced  that  it  had  landed  KPMG 
Peat  Marwick  L.L.P.  as  a  customer  for  its  Communicator  client  and 
SuiteSpot  server  line. 

Beyond  Domino 

■  Lotus  Development  Corp.  last  week  announced  tools  for  inte¬ 
grating  its  Domino  server  technology  with  database,  transaction 
and  enterprise  application  systems.  Set  for  availability  in  the  sec¬ 
ond  quarter,  Domino.  Connect  will  provide  access  from  Notes  cli¬ 
ents  and  Web  browsers  to  SAP  AG’s  R/3  applications;  CICS, 
Tuxedo  and  Tandem  Computers,  Inc.  transaction  processing  sys¬ 
tems;  and  assorted  relational  databases. 

3Com  to  improve  access 

■  3Com  Corp.  is  expected  to  announce  next  month  at  the  Corn- 
Net  ’97  trade  show  in  Washington,  D.C.  enhancements  to  its 
AccessBuilder  4000, 5000,  and  8000  enterprise  and  carrier-class 
access  devices.  The  company  plans  to  unveil  support  for  Point-to- 
Point  Tunneling  Protocol,  integration  of  ISDN  Primary  Rate 
Interface  technology  and  added  security  and  management 
capabilities. 

UUNET  goes  upscale 

■  In  an  effort  to  keep  up  with  bandwidth  demands,  WorldCom, 
Inc.  subsidiary  UUNET  Technologies  is  expected  to  announce  it  is 
expanding  its  domestic  network  to  support  an  OC-1 2  backbone. 
Today,  UUNET  supports  a  DS-3  backbone  based  on  Cascade 
Communications  Corp.  9000  switches  and  Cisco  Systems,  Inc. 

7000  routers. 

No  need  to  panic 

■  Predictions  of  a  U.S.  telephone  network  meltdown  due  to  Inter¬ 
net  traffic  have  been  greatly  exaggerated,  according  to  a  new  study 

sponsored  by  a  computer  and  data  communi¬ 
cations  industry  group.  The  study,  conducted 
by  Economics  and  Technology,  Inc.  for  the 
Internet  Access  Coalition,  claims  that  the  U.S. 
public  switched  telephone  network  can  han¬ 
dle  the  growing  amount  of  Internet  and  other 
data  traffic  in  the  short  term.  Long  term,  how¬ 
ever,  the  circuit-switched  network  will  need  to 
be  improved  with  “data-friendly”  equipment 
to  handle  increased  Internet  and  online  ser¬ 
vice  traffic,  the  study  says. 

TNG  touches  down 

■  Computer  Associates  International,  Inc.  (CA)  this  week  is  host¬ 
ing  a  big  press  bash  in  New  York  where  it’s  expected  to  announce 
shipment  of  Unicenter/TNG.  U  nveiled  almost  two  years  ago,  Uni¬ 
center/TNG  is  CA’s  next-generation  network  and  systems  man- 
agement  software  suite  thatfeatures,  among  other  capabilities,  a 
snazzy  3-D  virtual  reality  user  interface. 


Kodak  to  snap  up  Wang  imaging  unit? 

Announcement, from  photography  company  could  come  as  early  as  this  week. 


By  Paul  McNamara 

While  the  development  has 
been  anything  but  Instamatic, 
photography  giant  Eastman 
Kodak  Co.  appears  ready  to 
stamp  its  world-renowned 
imprint  on  the  growing  elec¬ 
tronic  imaging  market  by  pur¬ 
chasing  a  chunk  of  Wang 
Laboratories,  Inc. 

Sources  said  the  deal  to  buy 
Wang’s  imaging  software  unit 
may  be  completed  any  day  now, 
almost  four  months  after  the 
companies  first  confirmed  their 
mutual  interest. 

“Most  of  the  people  that  I’ve 
talked  to  kind  of  think  of  it  as  a 
done  deal,”  said  Tom  Brown,  a 
senior  analyst  at  Prudential  Secu¬ 
rities,  Inc.  in  New  York.  Brown 
has  heard  “[Wang  and  Kodak] 
hope  to  announce  something  by 
the  time  Wang  reports  earnings 
[this]  week.” 

Neither  Wang,  headquar¬ 
tered  in  Billerica,  Mass.,  nor 
Rochester,  N.Y.-based  Kodak, 
would  comment  on  the  state  of 
their  negotiations. 

Industry  watchers,  however, 


are  predicting  a  quick  consum¬ 
mation  of  a  deal  that  will  report¬ 
edly  cost  Kodak  about  $200 
million. 

As  ever  more  businesses  look 
to  digitize  paper 
documents,  the 
acquisition  would 
strengthen  Kodak’s 
stance  in  an  elec¬ 
tronic  imaging  mar¬ 
ket  currently  domi¬ 
nated  by  companies 
such  as  IBM  and 
FileNetCorp. 

Dependent  pri¬ 
marily  on  old-fash¬ 
ioned  microfilm 
products,  Kodak  is 
currently  a  reseller 
of  Wang’s  electronic 
imaging  software 
but  lacks  such 
advanced  technol¬ 
ogy  of  its  own. 

Wang’s  imaging 
unit  garnered  $50 
million  in  sales  last 
fiscal  year  and  con¬ 
tinues  to  grow.  However,  the 
company  needs  cash  to  bolster  its 


outsourcing  and  service  business 
as  it  navigates  a  now  3-year-old 
recovery  from  bankruptcy,  ex¬ 
perts  said. 

When  Wang  and  Kodak  first 
acknowledged  their 
talks  back  in  Octo¬ 
ber,  many  industry 
watchers  expected 
the  deal  would  take 
merely  weeks  to 
finalize. 

However,  sources 
said  that  timetable 
was  disrupted  by 
knotty  tax  implica¬ 
tions,  worries  about 
an  exodus  of  brain¬ 
power  from  Wang 
and  concern  over 
preserving  Wang’s 
deal  with  Microsoft 
Corp.  to  include  its 
image  viewer  in  Win¬ 
dows  95. 

Those  difficulties 
were  overcome,  said 
one  source,  in  large 
part  by  an  agree¬ 
ment  that  Wang  will  remain  an 
independentbusiness  unit.  ■ 


KODAK’S  BITE 
GETTING  BIGGER 

If  Kodak  buys  Wang’s 
imaging  software 
business,  Kodak  will 
control  about  20% 
of  the  $2.5  billion  to 
$3  billion  market, 
according  to 
International  Data 
Corp.  in  Framingham, 
Mass.  Currently, 
Kodak  claims 
16%  to  18%  of  the 
market,  while  Wang 
claims  4.5%. 


An  Ethernet  switch  for  half  price 


By  Jodi  Cohen 

Mountain  View,  Calif. 

Still  hanging  on  to  your  hubs? 

Well,  that  might  be  difficult  to 
justify  when  start-up  AxoNet 
Technologies,  Inc.  this  week 
unveils  an  Ethernet  switch 
priced  at  $60  per  port. 

That’s  about  the 
same  price  as  a  man¬ 
aged  shared-media 
hub,  and  about  half  the 
cost  of  comparable 
stand-alone  switches  in 
this  most  price-sensi¬ 
tive  of  markets.  Bay 
Networks,  Inc.  sells  its 
221 6T  Ethernet  switch 
for  about  $130  per 
port,  while  3Com  Corp. 
comes  in  a  little  lower 
with  its  SuperStack  II 
Switch  1000  at  $120  per 
port. 

“AxoNet  is  setting  new  price 
points  with  its  Ethernet  switch,” 
said  Esmerelda  Silva,  an  analyst 
at  International  Data  Corp.,  a 
market  research  firm  in  Fra¬ 
mingham,  Mass.  “It  competes 
head-on  with  shared-media  solu¬ 
tions  and  makes  the  decision  to 
buy  a  switch  over  a  hub  easy. 

In  fact,  the  pricing  is  so  attrac¬ 
tive  there’s  almost  no  reason  to 


stick  with  shared  10M  bit/sec 
Ethernet  technology,  Silva  said. 

So  what  is  AxoNet’s  secret? 
Well,  Pankaj  Chowdhry,  com¬ 
pany  president  and  chief  execu¬ 
tive  officer,  did  not  want  to 
give  away  too  much.  But  he 
said  that  by  adopting 
existing  technologies, 
AxoNet  has  eliminated 
the  expense  of  design¬ 
ing  custom  processors 
and  has  significantly 
reduced  its  manufactur¬ 
ing  costs. 

Chowdhry,  previ¬ 
ously  vice  president  of 
information  technol¬ 
ogy  at  Olympian  Graph¬ 
ics,  Inc.  in  Oakland, 
Calif.,  started  AxoNet 
after  becoming  frus¬ 
trated  by  the  high  cost 
of  desktop  Ethernet  switching. 
“Users  were  always  coming  to 
me  saying  that  the  network 
wasn’t  fast  enough  and  response 
time  was  horrible,”  he  said.  “But 
I  could  not  make  a  business  case 
for  spending  the  thousands  of 
dollars  needed  to  upgrade  to  a 
fully  switched  network.” 

So  AxoNet  was  born. 
Chowdhry  —  who  helped  raise 
more  than  $1  million  from 


industry  insiders  —  is  joined  at 
the  company  by  engineers  from 
top  vendors,  including  Cisco  Sys¬ 
tems,  Inc.,  3Com,  Hewlett-Pack¬ 
ard  Co.  and  IBM. 

Still,  some  industry  observers 
are  skeptical.  They  note  that 
AxoNet  does  not  have  the  name 
recognition,  reputation  or  sup¬ 
port  infrastructure  of  its  larger, 
more  established  competitors. 

But  AxoNet  hopes  its  NC-100 
eight-port  Ethernet  desktop 
switch  —  which  costs  $500  —  will 
be  enough  to  entice  customers. 
The  device  operates  at  wire 
speed  and  supports  as  many  as 
8,000  media  access  control 
addresses.  Also,  each  switch  port 
has  four  management  LEDs  that 
indicate  transmit,  receive,  colli- 
son  and  link  status. 

Future  AxoNet  products  will 
include  a  stackable  version  of  the 
eight-port  switch,  which  will 
offer  a  100M  bit/sec  uplink  as 
well  as  an  ISDN  port  for  WAN 
connectivity.  The  company  also 
will  offer  stand-alone  and  stack- 
able  versions  of  a  100M  bit/sec 
switch.  All  products  will  be  avail¬ 
able  in  the  second  quarter. 

The  NC-100,  due  to  ship  at 
the  end  of  the  month,  will  be  sold 
through  distributors.  AxoNet 
would  not  comment  on  any 
OEM  deals  in  die  works. 
©AxoNet:  (415)  969-7777. 


AxoNet's  Chowdhry 
hopes  to  replace 
customers  ’hubs 
with  his  company 's 
$60-per-port 
Ethernet  switch. 
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Protocol  encapsulation,  configuration  nightmares,  per- 
formance  issues,  security  concerns...  just  to  name  a  few. 
And  just  try  troubleshooting  and  managing  this  mess  with 
something  not  designed  from  the  ground  up  precisely  for 
this  purpose. 

When  it  comes  to  your  wide  area  network  links,  you 
can’t  afford  to  be  clueless.  Racal's  family  of  T  1/fractional 
T1  CSU/DSUs  can  handle  anything  your  wide  area  router 
networks  throw  at  it.  They  were  designed  expressly  to 
provide  you  with  critical  visibility  to  your  wide  area  net' 
work  links  so  that  you  can  diagnose  and  rectify  net¬ 
work  problems  quickly  and  easily. 

So  when  the  time  comes 
to  link  your  routers  ^ 
over  a  wide 
area  network, 
stick  with  a 
respected,  dedi¬ 
cated  company 
which  has  your  best' 
interest  at  heart. 

Racal  ™  CSU/DSUs 
will  help  make  wide 
area  networking  a  lot 
less  scary. 


Racal  CSU/DSUs  offer  proven  performance,  unrivaled 
capabilities: 

•  Fully  managed  via  embedded  SNMP  agent.  Extensive 
enterprise  MIB  provides  you  with  a  wealth  of  critical 
device  network  performance  information,  including  line 
quality  and  ESF  (extended  super- frame)  performance  data 

•  Racal  network  management  applications  provide  help¬ 
ful  graphical  displays,  making  it  easy  to  analyze  manage¬ 
ment  information.  Applications  available  for  most  popu¬ 
lar  SNMP  platforms:  HP  OpenView™-Unixs),  HP 
OpenView-Windows™,  and  NetView®.  Full  TELNET 
support  included. 

•  A  wide  variety  of  SNMP  connection  options,  including 
built-in  Ethernet  port  for  direct  LAN 

attachment. 

•1,2  and  4  DTE  port  models,  as 
well  as  high  density  central  site 
solutions  and  drop  and  insert 
capability.  Flash  memory  and 
LCD  front  panel  standard  on  all 
models. 

•  Remarkably 
affordable. 
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Racal 

Excalibur™  ISX 

Paradyne 
3160  series 

ADC 
Kentrox® 
DataSMART  T1 

Digital 

Link 

T1  Encore 

Adtran® 

TSU 

series 

Integral  SNMP  Agent 
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TELNET  client  support 
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High  density  central  site  models 

✓ 

/ 

/ 

/ 

/ 

Flash  Memory 

/ 

/ 

/ 

Lowest  cost 

/ 

_ 

’ 

:  I-'- 


Racal,  Racal-Datacom  and  Excalibur  are  trademarks  of  Racal  Electronics  Pic.  HP  OpenView  is  a  trademark  of  Hewlett-Packard  Company.  NetView  is  a  trademark  >f 
International  Business  Machines  Corporation.  UNIX  is  a  registered  trademark  in  the  United  States  and  other  countries,  licensed  exclusively  through  X/Open  Companv. 
Ltd.  Windows  is  a  trademark  of  Microsoft  Corporation.  Adtran  is  a  registered  trademark  of  Adtran,  Inc.  All  other  logos,  trademarks  and  registered  trademarks  art  the 
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Switching  showdown  puts  Big  Four  to  test 


By  Jodi  Cohen 

Washington,  D.C. 

Each  of  the  Big  Four  inter¬ 
networking  players  has  its  strat¬ 
egy  to  migrate  customers  from 
shared  to  switched  nets,  but  no 
one  ven  dor  has  the  perfect  plan . 
That’s  why  Network  World. 

COMPETING  SWITCHING  SCHEMES 


next  week  is  hosting  The  Great 
Switching  Debate  at  ComNet 
’97  here.  The  event  aims  to 
expose  the  differences  among 
the  seemingly  plain-vanilla  ven¬ 
dor  architectures. 

A  pair  of  industry  analysts, 
alongwith  a  member  of  the  end- 


Vendor 

3Com 

Bay 


Strategy 

Transcend 

Networking 


BaySIS 


Cabletron  Synthesis 


Cisco 


CiscoFusion 


Description 

Relies  on  the  company’s  hubs,  LAN  and  ATM 
switches,  routers  and  management  gear  to  let 
users  build  switched  virtual  networks. 

Applies  to  desktop  access,  LAN  backbones,  WAN 
backbones  and  remote  sites.  It  defines  three  areas: 
transport  services,  policy  services  and 
operation  services. 

Follows  the  networking  model  used  by  the 
telephone  company,  combining  ATM,  packet 
switching,  enterprise  management  and  con¬ 
nection  management  services  for  migrating 
customers  from  shared  to  switched  networks. 

Includes  a  phased  integration  of  switching  devices 
into  shared-media  networks,  incorporating  LAN 
switching  within  the  wiring  closet,  and  ATM 
switching  and  routing  on  the  backbone. 


user  community,  will  pepper 
high-level  executives  from 
3Com  Corp.,  Bay  Networks, 
Inc.,  Cabletron  Systems,  Inc. 
and  Cisco  Systems,  Inc.  with 
technical  questions,  hoping  to 
clarify  their  strategies  and  poke 
holes  in  their  offerings. 

One  of  the  analysts  who  will 
be  doing  the  questioning  said 
the  panel  will  push  hard  to  point 
out  the  key  differentiators. 

“When  you  pick  at  the  scab, 
all  [the  vendors’  strategies]  are 
going  to  be  very  much  the  same 
at  the  high  level,’’  said  Thomas 
Nolle,  president  of  CIMI  Corp., 
a  Voorhees,  N.J.,  consultancy. 
“But  when  we  drill  down  to  the 
next  level,  you’ll  see  fundamen¬ 
tal  differences  that  are  going  to 
be  important  to  the  user.” 

For  example,  Nolle  said  Ca¬ 
bletron  is  more  committed  to 
switching  as  an  overall  net  archi¬ 
tecture  than  the  other  vendors 
because  it  has  no  routing  com¬ 
ponent.  “But  that  means  Cable¬ 
tron  has  the  unique  challenge 


THE  GREAT  SWITCHING  DEBATE 

Where:  Grand  Ballroom,  Renaissance  Hotel  in 
Washington,  D.C. 

When:  Feb.  5, 1:30  to  2:45  p.m. 

Moderator:  John  Gallant,  editor  in  chief  of 
Network  World 

Vendor  participants:  3Com’s  Mick  Seaman, 
Bay’s  Bill  Hawe,  Cabletron’s  Chris  Oliver  and 
Cisco’s  Alan  Marcus 

Analysts:  CIMI’s  Thomas  Nolle  and  The  Tolly 
Group’s  Kevin  Tolly 

User  panelist:  To  be  announced 


of  justifying  switching, 
even  in  applications 
where  trunk  speeds  are 
low  and  where  switch 
performance  isn’t  much 
of  a  factor,”  he  said. 

Router  king  Cisco  has 
the  opposite  problem. 

“Cisco  has  a  tendency  to 
make  network  problems 
into  routing  problems 
when  users  may  believe 
that  they  are  more  rea¬ 
sonable  switching  prob¬ 
lems,”  Nolle  said. 

Analysts  will  also 
point  out  any  overlap  and  gaps 
in  the  vendors’  product  lines. 

“Cisco  offers  so  many  token¬ 
ring  strategies  that  it’s  not  clear 
which  one  is  strategic,”  said 
panel  member  Kevin  Tolly,  pres- 
identand  chief  executive  officer 
of  The  Tolly  Group,  a  testing 
and  consulting  firm  in  Manas- 
quan,  N.J.  “And  for  3Com,  is 
the  3Com/ Chipcom/IBM  ATM 
switch  line  strategic,  or  is  it  the 
3Com/NiceCom  ATM  gear?” 

Another  issue  is  whether  net 
managers  should  eliminate  cer¬ 
tain  technology  or  just  add  com¬ 


plementary  technology. 

“Cabletron’s  SecureFast  Vir¬ 
tual  Networking  is  third-genera¬ 
tion  technology,  implying  that 
first-  and  second-generation 
products  should  be  done  away 
with,”  Tolly  said,  “whereas  Cis¬ 
co’s  switching  strategy  says  that 
switching  is  third  generation 
and  routing  is  second  genera¬ 
tion,  and  a  combination  of  both 
products  are  what  you  need.” 

Other  topics  will  include  how 
vendors  plan  to  handle  quality- 
of-service  applications  and  pro¬ 
vide  virtual  LAN  capabilities.  ■ 


First  Virtual  gives  intranets 
high-quality  video  abilities 


Microsoft  unveils  Java  foundation 


By  Jodi  Cohen 

Santa  Clara,  Calif. 

First  Virtual  Corp.  last  week 
announced  software  that  en¬ 
ables  customers  to  support  high- 
quality  video  on  corporate 
intranets. 

With  First  Virtual’s  integra¬ 
tion  of  its  ATM  middleware 
with  Netscape  Communications 
Corp.  and  Microsoft  Corp. 
browsers,  customers  can  con¬ 
duct  real-time  interactive  video 
meetings,  distribute  live  video 
broadcasts,  as  well  as  record, 
replay  and  store  video  across  a 
LAN  or  WAN. 

Version  4  of  First  Virtual’s 
Media  Operating  Software 
(MOS)  —  middleware  that  lets 
video  applications  take  advan¬ 
tage  of  ATM’s  quality-of-service 
capabilities  —  runs  on  ATM 
switches,  servers  and  PC  clients. 

MOS  is  the  key  to  the  compa¬ 
ny’s  new  suite  of  client  applica¬ 
tions.  That  software  includes: 

•  V-TV,  which  runs  on  MOS  over 
Windows  and  Windows  95,  and 
enables  browser  users  to  view  live 
broadcasts. 

•  V-Caster,  an  ATM-attached 
multimedia  device  that  distrib¬ 
utes  TV  signals  across  intranets 


bybroadcastingMPEG-1  streams 
over  an  ATM  network. 

•  V-Synch,  which  allows 
two  users  to  synchronize 
the  playback  of  a  multimedia 
file  from  two  different 
locations. 

•  And  V-Record,  which 
simultaneously  records 
both  ends  of  a  real-time 
videoconference  and 
then  stores  it  directly  to  a 
First  Virtual  V-Cache 
video-on-demand  stor¬ 
age  device. 

All  of  these  network¬ 
ing  applications  can 
be  launched  within  the 
Netscape  Navigator  or 
Microsoft  Internet  Explorer 
browsers. 

As  far  as  the  quality  of 
video  being  delivered,  First 
Virtual’s  video  streams  run  at 
30  frame/sec  and  require 
384Kbit/sec  of  bandwidth. 

“Business-quality  video  over 
the  intranet  gives  customers 
the  ability  to  collaborate  on 
projects  without  time-consum¬ 
ing  and  expensive  travel,  ”  said 
Ralph  Ungermann,  president 
and  chief  executive  officer  of 
First  Virtual. 


One  analyst  agreed  that 
videoconferencing  is  a  good  cor¬ 
porate  tool. 

“There’s  just  so  much  that’s 
occurring  in  business  that’s 
driving  the  adoption  of 
video-conferencing,”  according 
to  Jeannine  Linehan,  project 
manager  at  Sage  Research,  Inc., 
a  Natick,  Mass.-based  market 
research  firm.  “For  example, 


it’s  quite  acceptable  now  to 
use  videoconferencing  to  make  a 
sales  presentation.” 

Upgrade  fees  for  MOS 
4  range  from  $250  for  a  one- 
user  license  to  $12,000  for  a 
100-user  license.  Netscape  Navi¬ 
gator  V-TV  and  V-Synch  support 
is  available  now  and  Micro¬ 
soft  Internet  Explorer  and 
V-Record  support  will  be  avail¬ 
able  by  the  end  of  the  first 
quarter. 

©First  Virtual:  (800)  351- 
8539. 


By  Carol  Sliwa 

Redmond,  Wash. 

Continuing  its  rollout  of  Java 
offerings,  Microsoft  Corp.  last 
week  announced  Application 
Foundation  Classes  (AFC)  in¬ 
tended  to  easejava  development. 

These  so-called  building 
blocks  are  for  creating  more 
sophisticated  user  interfaces, 
graphics  and  multimedia  appli¬ 
cations. 

Of  particular  note,  Microsoft 
said  its  AFCs  —  prewritten  pack¬ 
ets  of  code  that  developers  can 
drop  into  an  application  rather 
than  build  the  code  from  scratch 
—  would  work  cross-platform  on 
any  standard  Java  Virtual 
Machine  and  serve  as  a  compati¬ 
ble  supserset  of  Sun  Microsys¬ 
tems,  Inc.’s  Abstract  Windowing 
Toolkit  (AWT),  tools  for  creating 
graphical  user  interfaces. 

“What  that  means  to  develop¬ 
ers,”  said  Don  DePalma,  a  senior 
analyst  with  Cambridge,  Mass.- 
based  Forrester  Research,  Inc., 
“is  there’s  no  need  to  pick  and 
choose  between  AWT  and  AFC.” 

But  they  will,  he  said,  have  to 
make  a  choice  about  Netscape 
Communications  Corp.’s  simi¬ 
larly  positioned  Internet  Foun¬ 
dation  Classes  (IFC),  which 
shipped  in  December. 

One  software  engineer  famil¬ 


iar  with  both,  Ken  Rawlings  of 
Scopus  Technology,  said  Micro¬ 
soft’s  AFCs  provide  new  features. 
“I’m  sure  IFC  is  going  to  get 
there,  but  some  of  the  stuff 
Microsoft  is  showing  is  pretty 
impressive,”  Rawlings  said. 

As  for  Sun’s  original  AWT,  it 
has  been  roundly  criticized  dur¬ 
ing  the  past  year  for  its  lackluster 
graphics.  The  new  overhauled 
AWT,  in  beta  now,  is  due  out 
sometime  in  the  first  quarter. 

Sun’s  reaction  to  the  Micro¬ 
soft  announcement?  “We’re 
happy  to  see  them  building  class 
libraries  in  Java,  and  we  look  for¬ 
ward  to  seeing  the  code  and  put¬ 
ting  it  through  the  100%  Pure 
test,”  said  spokeswoman  Lisa 
Poulson,  referring  to  the  hyped 
Java  initiative  being  en-dorsed  by 
more  than  100  vendors. 

Products  carrying  the  100% 
Pure  Java  stamp  are  supposed  to 
run  on  all  platforms.  But  the  cer¬ 
tification  testing  program  has 
not  been  finalized  yet. 

Microsoft  program  manager 
Charles  Fitzgerald  said  the  com¬ 
pany  cannot  commit  to  100% 
Pure  Java  when  it  does  not  know 
what  it  is  yet.  And  the  AFCs  are 
not  due  out  until  later  this  quar¬ 
ter,  when  Microsoft’s  Internet 
Explorer  4.0  Web  browser  will  be 
out  in  beta.  ■ 


“The  quality  of 
video  used  in 
businesses  is 
critical  to  its 
acceptance  and 
effectiveness.  ” 

Ralph  Ungermann, 

oresidentand  CEO, 

-irst  Virtual 
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Fast  Ethernet  stackable  hubs 


Let’s  face  facts.  A  few 
users  simultaneously 
accessing  standard  office 
applications  can  drain 
all  the  bandwidth  in  a  ^ 

10  Mbps  network. 

Combine  that  with  '{A 
today’s  client/server,  ^ 
Internet  access,  and 
imaging  applications,  and 
1 0  Mbps  to  the  desktop  won’t 
hold  water  for  very  long. 

Fortunately,  SMC  has  a  bet¬ 
ter  way  to  quench  your  thirst 
for  bandwidth:  SwitchReady™ 
TigerStack™  1 00  Fast 
Ethernet  stackable  hubs. 

With  the  TigerStack  1 00, 
you  can  implement  a  shared 
100  Mbps  net- 
work  today,  add  l 
Fast  Ethernet . 
switching  when- 
ever  you  need, 
and  build  a  solid  <  ’ 
foundation  for  l  * 

long-term  growth. 


The  TigerStack  1 00 
also  makes  it  easy  to 
integrate  100  Mbps 
technology  with  your 
A  10  Mbps  LAN— improv¬ 
ising  response  time  for 
Wn  all  network  users, 
jjy  And  with  multi-seg¬ 
ment  management  (SNMP 
and  RMON),  as  well  as  the 
industry’s  strongest 
Customer  Satisfaction 
Guarantee,  the  TigerStack  100 
offers  all  the  reliability  you 
need.  Not  to  mention  a 
per-port  price  that’s  easy 
to  swallow. 

So  if  you’re  looking  for 
a  bandwidth  solution  with 
capacity  for 
~rr— the  future, 

.  .¥■  look  to  the 
.  as-.  TigerStack  1 00 
;  ; i"  / %  from  SMC.  We 
think  you’ll  find 
!  _  our  Fast  Ethernet 

«-  ~  strategy  watertight. 


oMEA 


SMC  TigerStack  1 00 


Connect  With  Us 


For  information  on  SMC  products 
call  1 -8O0-SMC-4-YOU,  Dept.  WG06 

http://www.smc.com 

For  your  free  SMC 

Practical  Guide  to  LAN  Switching  and  Fast  Ethernet  Integration, 
call  us  or  visit  our  Web  site  today. 

©Copyright  1 997  Standard  Microsystems  Corporation 
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Network  computers  introduce 
uncertainty  and  cost  savings 


DSL  TRAIN  STARTS  TO  ROLL 

US  WEST  is  the  first  major  carrier  to  roll  out  Digital  Subscriber  Line  (DSL)  services. 

Speeds:  128K  bit/sec  without  a  voice  channel  or  704K  bit/sec  j 

with  a  voice  channel  -  -  * 


Price:  $75  to  $175  (estimate) 

Technology:  ISDN  DSL  from  Ascend  and  High-bit-rate  DSL  from  PairGain 


0 


III 


Availability:  By  midyear  in  Seattle;  Denver;  Minneapolis  and  Rochester,  Minn.; 

Phoenix  and  Tucson,  Ariz.;  Salt  Lake  City;  Portland,  Ore.;  Albuquerque, 
N.M.;  Spokane,  Wash.;  Omaha,  Neb.;  Des  Moines  and  Cedar  Rapids, 
Iowa;  and  Boise,  Idaho 


US  WEST  rolls  out  DSL 


Top  speed  for  offerings  is  currently  704K  bit/sec. 


By  John  Cox 

Deploying  large  numbers  of 
so-called  network  computers 
(NC)  instead  of  Windows  PCs 
could  have  unforeseen  effects  on 
corporate  networks.  But  then 
again,  it  may  not. 

And  that’s  the  point:  Nobody 
knows. 

“Right  now,  NCs  are  un¬ 
charted  territory,”  said  Gordon 
Bass,  director  of  systems  engi¬ 
neering  at  AARP  Pharmacy  Ser¬ 
vices,  the  mail  order  pharmacy 
for  Retired  Persons  Services,  Inc. 
in  Alexandria,  Va. 


Standard  Windows  95  PC 

NC  client  (Oracle  model, 
downloadable  Java  applets) 

NC  server  (Citrix  model, 

Windows  apps  server) 

NetPC/NT  Server  5.0  (Microsoft/Intel 
model,  zero  administration  PC) 


Given  the  uncertainties,  MIS 
groups  need  to  fine-tune,  or 
even  create,  a  framework  that 
will  track  NC  deployment  and 
the  impact  NCs  have  on  network 
traffic  and  application  response 
time. 

“We’re  convinced  NCs  will 
move  the  bottlenecks  from  one 
place  to  others  in  the  network,” 
Bass  said.  “So  we’re  monitoring 


our  network  bandwidth  and  uti¬ 
lization  to  measure  our  capacity 
needs  and  to  add  capacity  as 
needed.” 

These  uncertainties  are  un¬ 
likely  to  kill  off  corporate  enthu¬ 
siasm  in  the  savings  promised 
by  NCs,  as  confirmed  in  a  Gart¬ 
ner  Group,  Inc.  cost-of-owner- 
ship  study  released  last  week  (see 
graphic).  However,  they  may 
temper  that  enthusiasm  some¬ 
what. 

Dave  Cappuccio,  a  Gartner 
Group  vice  president  and  co¬ 
author  of  the  7-month-long 


$9,784 

- 

$6,010 

39% 

$6,775 

31% 

$7,267 

26% 

study,  said  NCs  shift  costs  for 
[technical]  support  from  the 
end  user  to  the  network,  which 
now  is  a  production  system. 
“Tech  support  and  servers  had 
to  be  beefed  up  to  ensure  the 
network  is  highly  available,”  he 
said. 

Others  insist  the  network  is 
already  a  production  system. 
IBM’s  Rochester,  Minn.,  LAN 


supports  about  5,000  or  6,000 
software  developers,  said  Bruce 
Anthony,  chief  architect  and 
strategist  for  IBM’s  Network  Sta¬ 
tion  device,  now  in  limited 
release. 

“When  that  puppy  is  down, 
we  don’t  do  any  work,”  he  said. 
“I  don’t  think  that  adding  some 
additional  network  dependen¬ 
cies  with  NCs  significantly 
changes  the  reliability  or  avail¬ 
ability  equation.” 

“If  the  customer  has  a  net¬ 
work  problem,  he  has  a  network 
problem  without  our  NC  de¬ 
vices,”  said  Doug  Klein,  chief 
technology  officer  for  Network 
Computer  Devices,  Inc., a  Moun¬ 
tain  View,  Calif.-based  NC 
vendor. 

Klein  has  seen  two  problems 
customers  encounter.  One  is 
caused  by  running  backbone 
traffic  over  the  same  wire  as  the 
NC  traffic. 

Another  problem  is  centraliz¬ 
ing  all  the  servers  in  one  site  with¬ 
out  enough  bandwidth  for 
access.  The  solution  to  both,  he 
said,  is  to  group  servers  by 
department  or  workgroup  at 
multiple  sites. 

Klein  admitted,  however, 
it  is  not  clear  how  moving  Java 
applications  over  the  network  — 
the  goal  of  the  Java-oriented 
NC  devices  —  will  affect  the 
picture. 

Yet  IBM,  Oracle  Corp.  subsid¬ 
iary  Network  Computing,  Inc. 
and  Sun  Microsystems,  Inc.  are 
all  now  completing  work  on 
server-based  software  that  is 
essential  for  controlling  the  NC 
environment,  including  manag¬ 
ing  the  end  user’s  desktop 
configuration  —  application 
access,  downloadable  software, 
and  file  and  E-mail  manage¬ 
ment.  I 


By  Tim  Greene 

Denver 

It  looks  like  it  will  still  be  a  few 
months  before  Digital  Sub¬ 
scriber  Line  (DSL)  services 
accelerate  to  multimegabit 
speeds,  but  initial  lower  speed 
offerings  last  week  from  US 
WEST  still  represent  bandwidth 
bargains. 

Rather  than  revving  up  the 
top  DSL  speeds  —  as  fast  as  8M 
bit/sec  in  one  direction  over 
conventional  phone  lines  —  US 
WEST’s  Interprise  group 
decided  to  go  with  mature  ISDN- 
based  DSL  (IDSL)  and  High-bit- 
rate  DSL  (HDSL) . 

“They  are  proven,  hardened 
technologies,”  said  Jerry  Par- 
rick,  Interprise  president. 
IDSL  and  HDSL  offer  speeds  of 
128K  bit/sec  and  704K  bit/sec, 
respectively,  with  US  WEST 
promising  Rate  Adaptive  DSL 
services  of  2M  bit/sec  in  one 
direction  and  1M  bit/sec  in  the 
other  by  year-end. 

Initially,  costs  will  be  deter¬ 


mined  case  by  case,  the  company 
said,  but  it  estimated  a  range  of 
$75  to  $175  per  month.  Installa¬ 
tion  will  cost  $300  to  $500. 

US  WEST  expects  DSL  to 
compete  with  its  frame  relay  and 
ISDN  offerings.  A  56K  bit/ sec 
frame  relay  line,  for  example, 
costs  $85  to  $  1 00  per  month. 

Davis  County  School  District 
in  Utah  is  buying  200  of  the  704K 
bit/sec  lines  to  replace  56K 
bit/sec  and  1.5M  bit/ sec  frame 
relay  lines.  The  district’s  bill  for 
89  lines  will  drop  from  $196,000 
to  $106,000. 

Brett  Azuma,  an  analyst  for 
Dataquest,  Inc.  in  San  Jose, 
Calif.,  said  the  prices  seemed 
good,  but  wide-scale  deployment 
will  depend  on  pushing  DSL 
gear  into  central  offices.  Parrick 
said  deployment  will  be  driven  by 
demand. 

Services  will  be  offered  to 
users  within  18,000  feet  of  a  DSL- 
equipped  central  office,  which 
leaves  out  about  a  third  of  US 
WEST’s  customers.  ■ 


A  CRASH  COURSE  IN  NETWORK  COMPUTER  COSTS 

A  Gartner  Group  study  found  that  ail  three  emerging  network  computer  (NC)  models 
can  save  users  money  compared  to  deploying  standard  Windows  95  PCs.  Network 
capital,  technical  support,  administration  and  end-user  costs  account  for  about 
half  the  cost  of  running  NCs,  according  to  the  study. 

Desktop  Annual  life  Cost  savings  compared 

computer  model  cycle  cost  to  Windows  95 


Security  vendors  strut  their  stuff 


THE  1997 


DATA  SECURITY 

CONFERENCE 


By  Ellen  Messmer 

San  Francisco 
A  Security  ven- 
|  \  AA  dors  always  come 
to  the  annual 
RSA  Data  Secu¬ 
rity  Conference 
to  strut  their  stuff,  and  this  year  is 
no  exception. 

VeriSign,  Inc.,  known  for  its 
X.509  public-key  digital  certifi¬ 
cates  that  bind  a  user’s  identity 
with  a  digital  signature,  will  use 
the  conference  today  to  launch  a 
custom  version  of  its  certificates 
for  organizations. 

Called  Private  Label  Digital 
ID  Services,  the  restricted-use 
digital  IDs  are  what  Visa  Interna¬ 


tional,  Inc.  and  Novus  Services, 
Inc.  (the  Discover  card  com¬ 
pany)  will  issue  to  card  carriers  in 
the  future  for  electronic  com¬ 
merce  on  the  Internet. 

VeriSign’s  private-label  certif¬ 
icates  offer  “a  way  a  company 
can  put  its  brand  on  [the  certifi¬ 
cates]  for  use  only  under  certain 
parameters,”  said  Gina  Jorash, 
director  of  product  marketing. 

For  instance,  the  Visa  certifi¬ 
cates  will  be  used  only  for  credit 
card  purchases  on  the  ’Net.  In 
contrast,  a  general-purpose  Veri¬ 
Sign  X.509  certificate  might  be 
used  between  total  strangers  for 
signing  E-mail  or  files. 

VeriSign  will  be  getting  more 


Start-up  Xcert  Software  aims  to  give 
VeriSign  a  run  for  its  money  in  the  area 
of  Internet-based  digital  certificates. 


competition  in  the  digital  ID 
business  from  start-up  Xcert 
Software,  Inc.,  which  today  will 
officially  launch  its  own  Internet- 


based  X.509  public-key 
management  software, 
called  the  Sentry  Certi¬ 
fication  Authority. 

Sentry  CA  was 
designed  to  give  firms  a 
way  to  cross-check  one 
another’s  certificates 
via  lookups  in  Sentry 
CA’s  version  of  the 
Secure  Lightweight 
Directory  Access  Proto¬ 
col,  said  Xcert  Director 
Charles  Hart.  Sentry 
CA  supports  a  way  to 
flexibly  plug  in  digital 
signature  formats  using  what 
Xcert  calls  XudaAPI. 

Entrust  Technologies,  Inc.,  a 
spin-off  of  Northern  Telecom, 
Inc.  —  which  developed  Entrust 
public-key  management  soft¬ 
ware  primarily  for  corporate 


intranets  rather  than 
the  public  Interent  — 
today  took  the  wraps  off 
desktop  encryption 
product,  the  Integrated 
Cryptographic  Engine. 

Through  use  of  an 
X.509  public-key  certifi¬ 
cate,  “you  encrypt  files 
on  a  hard  drive  with  a 
click  of  a  mouse  and 
click  again  to  open  it,” 
said John  Ryan,  Entrust 
Technologies’  chief  ex¬ 
ecutive  officer. 

Firewall  vendors  are 
also  expanding  their  product 
lines.  Milkyway  Networks  Corp. 
announced  SecurIT  Suite,  which 
packages  the  firm’s  Black  Hole 
firewall  with  new  remote  access 
and  auditing  components  for  a 
price  of  $14, 685. ■ 


“With  our  new  desk¬ 
top  product,  just  click 
on  a  mouse,  and  the 
file  will  be  encrypted 
on  the  hard  drive,  ” 
Entrust  ’sRyan  says. 


10  •  Network  World ‘January  27, 1997  •  www.nwfusion.com 


Lotus® 

Domino" 

Server 

■ 

DB2® 

Database 

Server 


Internet 

H  @ 

Connection 

Server 

IBM 

■ 

Software 

Servers 

Communi¬ 

solution 

cations 

No.l 

Server 

of  a  series 

Transaction 

Server 

■ 

Directory 

and 

Security 

Server 

■ 

Tivoli™ 

Management 

Server 


In  Canada,  call 
1  800  IBM-CALL, 
ext.  8405.  The  IBM 
home  page  is 
located  at 
www.ibm.com. 
IBM.  DB2,  OS/2  and 
AIX  are  registered 
trademarks  and 
Solutions  for  a 
small  planet  is  a 
trademark  of 
International  Business 
Machines  Corp. 
Lotus  is  a  registered 
trademark  and 
Domino  is  a 
trademark  of  Lotus 
Development  Corp. 
Tivoli  is  a  trademark 
ot  Tivoli  Systems,  Inc. 
'Windows  NT  is  a 
registered  trademark 
ot  Microsoft  Corp. 

©  1997  IBM  Corp. 
All  rights  reserved. 


Building  a  Website  for 
your  business  is  easily 
within  your  reach . 

Establish  your  presence  on  the  Web  with 
the  help  of  Lotus  Domino,  powered  by 
Notes.  It  lets  you  easily  set  up  an  interac¬ 
tive  Web  server.  So  your  customers  and 
employees  can  use  the  Web  to  communi¬ 
cate  and  collaborate  anytime,  anywhere. 
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IBM 
Software 
Servers 
solution 
No.  7 

of  a  series 


Analyze  data  so  deeply ; 
youre  able  to  conquer 
new  ground. 

Transform  piles  of  data  into  nuggets  of  vital 
customer  information  to  help  you  make 
smarter,  quicker  decisions.  For  instance, 
access  a  data  warehouse  from  the  Web 
or  your  company’s  intranet  with  our  DB2 
Database  Server.  It’s  completely  scalable 
and  runs  on  Windows  NT,’  OS/28 and  AIX! 


IBM 
Software 
Servers 
solution 
No.  3 

of  a  series 


Use  Internet  commerce 
to  boost  your  sales  ami 
customer  base. 

Selling  your  products  on  the  Web  exposes 
your  company  to  millions  of  new  prospects. 
And  risks.  IBM  Software  Servers  help  you 
reduce  those  risks.  They  provide  a  secure 
environment  for  processing  confidential  infor¬ 
mation  such  as  invoices  and  credit  cards. 


Its  easier  to  solve 
your  business  problems 
when  youve  got 
a  number  of  options. 


Priority  Code 
ZXP6E011 


Taking  advantage  of  the  Internet  is  one  of  the 

_  n  i  ooo  onn  smartest  options  you  have.  To  find  out  why, 

Call  1  ooo  200-5671,  1  J  J 

simply  call  or  visit  our  Website  for  a  free 
copy  of  A  Guide  to  Business  on  the  Internet. 
IBM  and  their  Business  Partners  can  take  you 
beyond  the  Net  to  help  you  create  a  more 
competitive  and  flexible  business  environment. 


Visit  us  on  the  Web  at 
www.software.ibm. 
com/info/snl/ 
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(IFMP)  would  bond  local  and  wide-area 

switches. 

“This  can  provide  increased  perfor¬ 
mance  levels  across  the  entire  network 
without  having  to  go  through  routing,” 
said  Christopher  Nicoll,  an  analyst  for 
Decisys,  Inc.  in  Sterling,  Va. 

“You  can  maintain  a  flat  network  archi¬ 
tecture,”  he  said. 

To  underscore  the  seriousness  of  their 
bid  to  wrest  IP-switching  mind  share  from 
router  king  Cisco  Systems,  Inc.,  the  com¬ 
panies  are  wheeling  out  three  of  their  top 
executives. 

3Com  Chairman  and  Chief  Executive 
Officer  Eric  Benhamou,  Cascade  Presi¬ 
dent  Dan  Smith  and  IBM  Network  Hard¬ 
ware  Division  general  manager  Lutz 
Hahne  are  scheduled  to  be  on  hand  for  a 
glitzy  announcement  in  New  York. 

Early  reaction  to  the  plan  is  positive. 
“Now  you’ve  got  a  high-performance 
architecture  that  doesn’t  include  routing, 
but  you  can  put  routing  in  specifically 
where  you  need  it  for  its  intelligence,  not 
because  you  have  to  have  it  for  connectiv¬ 
ity,”  Nicoll  said. 

But  there  are  cautions.  “This  is  a  nice 
idea  in  theory,  but  it  sounds  like  an  admin¬ 
istrator’s  nightmare,”  said  Robin  Lay- 
land,  principal  of  Layland  Consulting  in 
West  Hartford,  Conn.  “Individual  PCs 
controlling  bandwidth  access  is  too  much 
for  large  enterprises  to  handle.  I  hope 
they  come  out  with  a  nice  administration 
application  for  this.  ” 

With  drivers  being  written  by  3Com, 
PC  network  interface  cards  could  be 
upgraded  to  support  the  IP  switching 
scheme. 

IBM  will  make  IFMP  part  of  its  Multi¬ 
protocol  Switched  Services  software, 
which  controls  the  routing,  bridging, 
traffic  and  congestion  functions  of  its 
switches. 

According  to  sources,  the  IFMP  signal¬ 
ing  and  traffic  management  technology  is 
already  embedded  in  Cascade’s  IP  switch¬ 
ing  software,  IP  Navigator. 

Curiously,  Bay  Networks,  Inc.  is  not 
endorsing  the  scheme.  Bay,  3Com  and 
IBM  are  allied  in  the  Network  Inter¬ 
operability  Alliance  (NLA),  which  is 
attempting  to  empower  desktops  to 
request  quality  of  service  and  related 
issues. 

“This  proposal  was  not  discussed  in 
the  context  of  the  NIA.  And  because  of 
that,  we  have  no  formal  position  on  the 
3Com  proposal  from  the  NIA  perspec¬ 
tive,”  said  Tony  Clark,  director  of  strategy 
and  business  development  at  Bay. 

“We  have  some  concerns  that  this  is  yet 
another  IP  switching  proposal,”  Clark 
said.  “All  of  this  stuff  is  supposedly  being 
worked  on  within  the  IETF,  where  we 
thought  the  industry  was  making  some 
progress.  Instead,  what  appears  to  be  hap¬ 
pening  is  that  the  industry  is  diverging 
even  more.” 

Bay  also  believes  that  adding  IP  switch¬ 
ing  intelligence  at  the  desktop  may  add 
unnecessary  complexity  to  the  network, 


Clark  said. 

JayJonekait,  vice  president  of  extranet 
services  for  UUNET  Technologies,  a  sub¬ 
sidiary  of  WorldCom,  Inc.,  said  the  plan 
could  help  improve  extranet  service 
offerings.  An  extranet  is  a  private  IP  net¬ 
work  set  up  to  allow  authorized  business 
partners  limited  access  to  the  corporate 
network. 


SIEMENS 


“UUNET  is  absolutely  committed  to 
offering  business-level  quality  of  service 
over  the  Internet.  This  is  clearly  in  the 
direction  we  are  going.  If  these  products 
would  allow  us  to  enrich  our  Extranet  ser¬ 
vice,  then  it’s  the  kind  of  thing  we  would 
want  to  consider, ’’Jonekaitsaid. 

“Users  keep  wanting  more  and  more 
performance,  and  they  want  access  on 


demand,”  said  Lee  Provow,  vice  president 
of  marketing  and  sales  at  GridNet, 
another  WorldCom  subsidiary  that 
focuses  on  wholesale  Internet  services  in 
addition  to  Internet  access  and  intranet 
services. 

Senior  Writer  Denise  Pappalardo  contrib¬ 
uted  to  this  story. 


If  we  built  a  $36  million  telecommunications  network  in  the  Russian 
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Migration 

Continued  from  page  1 

wonder  why  they  need  to  endure  both  the 
cost  and  the  headaches  associated  with 
two  major  server  upgrades  within  just  18 
months.  And  many  are  riled  at  being 
forced  to  buy  into  the  less  useful  feature 
set  of  NT  4.0  in  order  to  get  at  what  they 


really  want,  the  NT  5.0  Active  Directory. 

“Why  should  I  have  to  put  all  my 
money  and  effort  into  4.0  when  it  doesn’t 
give  me  what  I  really  need?’’  asked  James 
McKane,  a  network  manager  with  Tread 
Corp.,  a  manufacturing  firm  in  Roanoke, 
Va.  McKane  said  his  NT  3.51  servers  are 
rock-solid,  and  he  does  not  want  to  upset 
that  stability  for  the  NT  4.0  graphical  user 


interface  or  the  bundled  Internet  fea¬ 
tures.  “The  directory  service  is  what  is 
going  to  make  my  life  easier,  and  Micro¬ 
soft  is  essentially  telling  me  to  pay  for  it 
twice  by  forcing  me  into  NT  4.0,”  hesaid. 

Others  pointto  the  disruption.  “Being 
a  24-by-7  shop,  we  can’t  afford  the  down¬ 
time  it  takes  to  carry  out  multiple 
upgrades,”  said  Rick  Shope,  manager  of 


undra. 


imagine  what  we  did  for  this  guy  Pete. 


The  challenge  came  in  to  us  from  Gazprom  AG, 
the  big  natural  gas-extraction  firm:  Would  we 
care  to  develop  and  install  a  comprehensive 
telecommunications  system  in  the  remote  far 
north  of  the  Russian  Federation? 

How  could  we  say  no?  So  we  layed  down  100 
kilometers  of  fiber-optic  line.  12,000  telephones. 
220  fax  machines.  47  telex  terminals.  1,000 
Telecourier  paging  receivers.  2,000  PCs  and 
video  terminals.  Radio  and  satellite  services  to 
Moscow.  Let's  see,  are  we  forgetting  anything? 

In  the  midst  of  all  this  we  got  a  call  from  one 
Pete  Slosberg  of  Pete's  Brewing  Company. 
Could  we  handle  a  phone-system  upgrade  for 
his  fast-growing  operation?  Drawing  liberally 
from  the  whole  breadth  of  our  product  line,  we 
fashioned  a  system  that  keeps  Pete's  far-flung 
field  reps  in  touch,  makes  sure  calls  get 
returned,  keeps  the  customers  happy,  helps 
the  company  prosper... you  get  the  idea. 

And  what  we've  done  for  Gazprom  and  Pete, 
we  can  do  for  you  as  well.  So  whatever  your 
challenge,  call  us  at  1-800-765-6123,  ext.  G12.0r 
visit  our  Web  site  at  www.siemenscom.com. 

No  matter  what  you've  got  brewing -big  or 
small- we  can  help. 

Challenge  Us. 


PC  technology  and  planning  at  Nations- 
Banc-CRT  in  Chicago. 

Forty-eight  of  NationsBanc-CRT’s  50 
NT  Servers  are  running  Version  3.51. 
Shope  is  planning  to  gradually  upgrade 
all  of  them  as  well  as  1,000  workstations  to 
NT  over  the  next  year.  However,  he  said, 
having  to  migrate  to  NT  4.0  first  will  likely 
delay  the  firm’s  eventual  move  to  NT  5.0. 

Allchin  claim  smoving  to  NT  4.0  first  is 
necessary  because  it  lays  the  groundwork 
for  the  distributed  computing  features 
expected  with  NT  5.0,  such  as  the  Active 
Directory  service.  For  example,  NT  4.0 
has  some  support  for  the  Unix-based 
Domain  Naming  System  (DNS),  which  is 
expected  to  play  a  big  role  in  host  name 
space  resolution  in  the  Active  Directory. 
Additionally,  NT  4.0  servers  can  run 
pieces  of  NT  5.0  technology  that  Micro¬ 
soft  has  already  made  available,  such  as  its 
Distributed  File  System. 
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“Learning  fromNomWs 
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smooth. 


Observers  disagree.  “That  is  baloney. 
Microsoft  just  doesn’t  have  a  compelling 
business  value  in  NT  4.0,”  said  Neil  Mac¬ 
Donald,  an  analyst  with  Gartner  Group, 
Inc.  in  Stamford,  Conn.  “They  did  noth¬ 
ing  with  the  directory.  You  can  get  the 
Web  server  they  put  in  there  free  anyway. 
Point-to-Point  Tunneling  Protocol  hasn’t 
taken  off,  so  what  do  you  really  get?  It’s 
arrogant  to  rope  people  in  by  threatening 
backwards  incompatibility.” 

MacDonald  also  noted  the  publicized 
problems  with  NT  4.0  device  driver 
incompatibility,  video  drivers  taking  the 
server  down  and  recent  NT  4.0  service 
pack  problems,  which  also  freeze  up  the 
server.  All  these  have  customers  that  are 
used  to  stable  NT  3.51  systems  scared  to 
make  the  move. 

“My  NT  3.51  servers  have  been  up 
since  last  February.  I  will  not  risk  that  secu¬ 
rity  to  prep  for  code  that  promises  a  lot 
but  isn’t  even  close  to  being  delivered,” 
said  Josh  Turiel,  director  of  information 
services  at  Adlife  Company,  Inc.,  an  adver¬ 
tising  firm  in  Norwood,  Mass. 

There  is  a  possibility  that  Microsoft  will 
look  at  compatibility  issues  should  NT  4.0 
not  be  more  widely  accepted  as  the  NT  5.0 
release  approaches,  said  Enzo  Schiano, 
group  product  manager  for  NT  Server. 

But  Allchin  said  the  company  is 
focused  on  making  the  NT  5.0  migration 
from  NT  Server  4.0  a  smooth  one. 

“We  will  let  users  install  an  NT  5.0  sys¬ 
tem,  and  it  will  run  with  the  old  4.0 
domain  controllers.  They  can  put  in  more 
5.0  systems  as  backup  and  primary 
domain  controllers  when  they  get  more 
comfortable,” hesaid.  ■ 
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With  every  Tom,  Dick  and 
Harry  selling  remote  access 
switches,  it’s  more  important  than 


Suddenly  Everyone 
Seemslo  Be  InThe 
Remote  Access 
Switching  Business. 


The  company  that  built  their  busi¬ 
ness  with  remote  networking 
products  like  the  MAX™  Family. 


ever  to  remember  that  only  one  company  leads  the  market  Which  can  now  support  up  to  672  simultaneous  connec- 

with  a  54%  share*.  Arid  only  one  company  can  claim  that  tions  with  its  next  generation  MAX  TNT™.  So  call  Ascend 


28  of  the  30  largest  ISPs  have  standardized  on  its 
remote  access  products.  That  company  is  Ascend. 


ASCEND 


today  at  1-800-632-8347,  ext.  417.  And  listen  to 
the  facts,  not  just  a  lot  of  fast  talk,  for  a  change. 


Remote  Networking  Solutions  That  Work.™ 


The  MAX 
Family 


Leading  central  site  WAN  access  switch 
with  over  2.2  million  ports  installed. 

First  platform  to  integrate  both  dial-up 
and  dedicated  access,  including  Analog, 
ISDN,  SW56/T1  and  Frame  Relay. 


Leading  digital  modem  (V.34)  tech¬ 
nology  with  millions  of  daily  users. 
Most  popular  authentication,  author¬ 
ization  and  accounting  system. 

The  only  central  site  solution  with 


www.ascend.com 


integrated  firewall. 

•  Scalable  from  8  to  672  dial-up  ports 
and  150  T1  Frame  Relay  connections. 

•  Highest  port  density;  lowest  price 
per  port. 


©  1996  Ascend  Communications.  Inc.  Ascend,  the  Ascend  logo.  MAX  and  MAX  TNT  are  registered  trademarks  ot  Ascend  Communications.  Inc. ‘Based  on  number  of  access  concentrators  sold.  Dell'Oto  Market  Research  Group,  1996. 
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Briefs 


■  RAScom,  Inc.  last  week 
introduced  RAServer  2900,  a  cen¬ 
tral  site  remote  access  server  that 
supports  tunneling  protocols, 
which  offer  a  secure  link 
across  IP  networks,  includ¬ 


ing  the  Internet.  A  single  24-slot 
chassis  can  support  as  many  as 
720  analog  lines  or  30  Primary 
Rate  Interface  ISDN  lines.  Ship¬ 
ping  now,  the  base  chassis  costs 
between  $28,500  and  $170,500. 

RAScom:  (603)  898-5200. 

■  International  Network 
Services  (INS)  said  it  is 
deploying  RMON2-compliant 
application  monitoring  software 
that  the  company  claims  is  based 
on  the  RFC 2021  standard  pub¬ 
lished  late  last  week. 

The  Remote  Monitoring  2 
standard  allows  RMON probes  to 
analyze  information  at  both  the 
network  and  application  layers. 
INS’  EnterprisePRO  software 
monitors  RM0N2  probes  from 
3Com  Corp.,  Frontier  Software 
Development,  Inc.  and  Hewlett- 
Packard  Co. 

INS  is  upgrading  all  its  Enter¬ 
prisePRO  customers  to  the  new 
software  at  no  additional  cost. 

INS:  (415)  254-0800. 

■  Quintus  Corp.  last  week 
announced  help  desk  soft¬ 
ware  that  provides  real-time 
information  to  help  users  resolve 
service  issues  faster. 

The  Impaq  software  utilizes 
intranet  publish/subscribe  tech¬ 
nology  to  push  customer  infor¬ 
mation  from  call  centers  out  to 
user  desktops.  Users  then  can 
view  customer  data  in  real  time 
through  a  Web  browser  and  cus¬ 
tomize  information  feeds  to  select 
data  most  appropriate  to  their 
needs. 

Impaq  costs  $25, 000  per  server 
and  $250 per  client,  and  will  be 
available  in  the  second  quarter. 

Quintus:  ( 800)  337-8941. 


IBM  aims  patents  at  net  technology 


By  Michael  Cooney 

Armonk,  N.  Y. 

IBM  is  using  an  odd  mix  of 
patent  lawyers  and  research 
engineers  to  build  itself  a  bigger 
role  in  your  enterprise  network. 

The  company  last  week 
announced  that  for  the  fourth 
consecutive  year,  it  led  all  high- 
tech  competitors  in  new  in¬ 
formation-handling  technology. 
IBM  said  it  hopes  to  turn  this 
leading-edge  technology  into 
products  diat  will  make  theirway 
into  customer  networks. 

Of  the  1,867  patents  IBM 
received  last  year,  almost  400 
were  directly  related  to  network¬ 
ing  hardware  and  software  — 
more  than  any  otheryear. 

This  year,  IBM  had  more  than 
50  patents  granted  for  ATM 
switching  and  about  200  for 


high-speed  networking.  Mobile 
computing,  LAN  switching  and 
net-based  video-on-demand  pat¬ 
ents  were  also  among  the  leading 
new  technologies  put  forth  by 
IBM’s  research  labs. 

One  of  the  features  IBM  pat¬ 
ented  in  1996  is  called  dynamic 
cut-through,  which  gives  an 
Ethernet  switch  the  ability  to 
automatically  control  and  man¬ 
age  data  traffic  passing  through 
the  device.  It  is  expected  to 
debut  in  IBM’s  Ethernet  switch 
this  year,  sources  said. 

‘  ‘It  enables  the  switch  to  oper¬ 
ate  in  a  store-and-forward  mode 
or  as  a  pass-through  device, 
depending  on  the  error  rates  of 
the  traffic,”  said  Marshall 
Phelps,  vice  president  of  intellec¬ 
tual  property  and  licensing  at 
IBM.  “Operators  have  to  per- 


Dialing  in  to  Mr.  Modem 


?  A 


Cable  and  56K  bit/sec 
modems,  ISDN,  Asym¬ 
metric  Digital  Sub¬ 
scriber  Line  (ADSL)  and  wireless 
technologies — the  staid  world  of 
remote  access  has  been  turned 
on  its  head  as  rivals  attempt  to 
speed  the  way  your  PC  talks  to  the 
outside  world.  To  sort 
through  the  activity,  Net¬ 
work  World  Senior  Writer 
Tim  Greene  spoke  with 
G.  David  Forney,  the 
“father  of  the  modem,” 
for  his  take  on  future 
technology. 

How  fast  will  analog  Forney 
modems  get? 

I  think  everyone  feels  64K 
bit/sec  is  the  absolute  upper 
limit.  But  I’ve  been  proved  wrong 
so  many  times  before,  I’m  a  bit 
gun-shy  to  come  down  too  hard. 

What’s  taking  cable  modems 
so long? 

Most  cable  nets  are  not  partic¬ 
ularly  well  engineered  up¬ 
stream.  It’s  a  shared  channel,  so 
you  need  techniques  for  avoid¬ 
ing  collisions  between  different 
users. 

What’s  the  best  bet  for  the 
mobile  user? 


For  quite  awhile,  there’s  noth¬ 
ing  that’s  going  to  beat  a  plain 
old  modem  for  universality. 

Can  V.34  modems  connect 
more  often  at  the  highest  rates 
they  are  capable  of  —  28.8K 
bit/sec  or  even  33. 6K bit/sec? 

The  latest  genera¬ 
tion  of  modems  was 
designed  to  be  an  intel¬ 
ligent,  adaptive,  best- 
effort  modem  that 
would  make  the  best 
use  of  whatever  chan¬ 
nel  it  found.  When  you 
have  a  33. 6K  bit/sec 
modem,  it’s  going  to  go 
as  fast  as  it  can,  subject  to  the 
channel’s  basic  physical  limits. 

Have  we  been  led  to  expect 
too  much,  then? 

You  know  from  Dilbert  car¬ 
toons  the  tension  that  exists 
between  the  engineering  side 
and  the  marketing  side. 

Will  we  see  ADSL  speeds 
faster  than  8M  bit/sec  in  one 
direction? 

The  modulation  adopted  is 
quite  sophisticated.  It’s  unlikely 
you  will  be  able  to  do  much  bet¬ 
ter  than  that  for  a  given  line  that 
you  get  on. 


form  this  function  manually 
today.” 

But  patents  do  not  always  lead 
to  products.  IBM  has  been  criti¬ 
cized  in  the  past  for  leaving  lead¬ 
ing-edge  technology  on  the  lab 
floor.  However,  since  1995  IBM 


IBM  tops  patent  pack 

1996  top  10  patent  recipients: 

No.  of 

Company 

patents 

IBM 

1,867  1 

Canon 

1,538 

Motorola 

1,064  | 

NEC 

1,042 

Hitachi 

961| 

Mitsubishi 

932 

Toshiba 

9121 

Fujitsu 

868 

Sony 

854| 

Matsushita 

837 

Others: 

Microsoft 

97  | 

3Com 

20 

Bay  Networks 

9J 

Cisco  3 

SOURCE:  U.S.  PATENT  AND  TRADEMARK  OFFICE,  WASHINGTON,  D.C. 


Frontier  Webifies 

By  Jim  Duffy 

Chelmsford,  Mass. 

Frontier  Software  Develop¬ 
ment,  Inc.  last  week  Web- 
enabled  its  line  of  network  mon¬ 
itoring,  troubleshooting  and 
reporting  tools. 

Frontier’s  Webcast  software 
lets  users  view  from  a  Web 
browser  physical-  to  application- 
level  traffic  reports  for  any  net¬ 
work  topology,  the  company 
said. 

Webcast  also  features  auto¬ 
matic  polling  to  update  data 
sources  while  keeping  network 
traffic  to  a  minimum.  The  poll¬ 
ing  is  done  by  Netscout  Server,  a 
domain-level  data  collection 
engine  that  periodically  polls 
Remote  Monitoring  probes  and 
SNMP  agents  within  the  domain. 

Frontier’s  competitors  in 
Web-based  monitoring  and  re¬ 
porting  include  Technically  Elite 
Corp.’s  DomainMeter  and  Hew¬ 
lett-Packard  Co.’s  NetMetrix 
product  line.  But  Frontier’s 
offering  is  a  little  higher  quality, 
according  to  John  McConnell, 
president  of  McConnell  Con- 


changed  its  awards  system  to 
encourage  its  engineers  to  bring 
products  to  market  faster. 

“Consequently,  30%  of  our 
networking  and  software  patents 
issued  in  1995  are  already  in 
product,”  Phelps  said. 

The  company  wants  to  bring 
leading-edge  networking  prod¬ 
ucts  to  market  quickly  in  an 
attempt  to  regain  the  technology 
leadership  role  it  has  lost  in 
recentyears. 

IBM  also  gains  financially 
from  its  patent  work:  Big  Blue 
made  $646  million  in  patent 
licensingfeesin  1995. 

And  occasionally  IBM  uses  its 
patents  as  a  weapon  against  com¬ 
petitors.  Last  year,  IBM  tried  to 
use  its  patents  to  prevent  Cisco 
Systems,  Inc.  from  developing 
competing  mainframe  channel 
connectivity  technology  (NW, 
Nov.  25, 1996,  page  1). 

According  to  Phelps,  IBM  has 
more  than  1 , 1 00  patent  licensing 
agreements  worldwide,  and  the 
amount  of  litigation  that  goes  on 
to  enforce  patents  is  small.  Since 
1993,  IBM  has  received  5,633 
patents.  ■ 


monitoring  suite 

suiting,  Inc.  in  Boulder,  Colo. 

Still,  users  found  some  rough 
edges.  “Installation  was  a  litde 
rough,”  said  Sam  McLane, 
senior  network  analyst  at  Temple 
University  in  Philadelphia.  “I 


Frontier’s  Webcast  allows  users  to  view 
frame  relay  statistics  via  the  Web. 

could  not  get  it  to  work  with  a 
Netscape  server,  but,  then  again, 
I  didn’t  try  real  hard  because  I 
didn’t  have  a  lot  of  time.” 

Webcast  and  Netscout  Server 
each  cost  $2,495.  They  will  be 
available  in  February. 

©Frontier:  (508)  244-4000. 
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Cisco  Systems 


The  Network  Works. 
No  Excuses'" 


SMALL  AND  MEDIUM-SIZED 


EXTENDED 


THE, 


"BEYOND 


Tell  me  how  to  fix  it. " 

If  you  manage  a  small  or  medium-sized  business  network,  what  do 
you  do  when  it’s  on  overload? 


Reach  new  levels  of  LAN  performance  with 
NetBeyond,™  the  extended  network  system. 

Eliminate  bottlenecks  and  feed  bandwidth-hungry  applications  with 
new,  affordable  NetBeyond  lOBaseT  switches  and  100BaseT  hubs.  Use  an 
EtherSwitch®  1220  or  1420  to  deliver  speed  where  you  need  it — while  protecting 
your  Ethernet  investment.  Or  stack  100BaseT  hubs  from  the  FastHub®  300  Series 
for  ten  times  the  performance.  Each  offers  unmatched  configuration  flexibility, 
so  you  can  add  users  and  new  technologies  as  needed.  And  they’re  all  part  of 
the  NetBeyond  system  of  switches,  hubs,  and  routers,  which  extends  your 
network  to  branch  offices,  mobile  users,  and  the  Internet.  Running  under  Cisco 
Internetwork  Operating  System  (Cisco  IOS™)  Technologies,  NetBeyond  compo¬ 
nents  are  guaranteed  to  work  together — and  their  comprehensive  management 
capabilities  mean  less  runaround  for  you. 


Want  to  know  more?  Get  the  free 


Extending  Your  Network  Personal 
Seminar  CD  by  calling 


800  778-3632,  ext.  186102. 

Or  for  more  information,  visit  our  Web  site 
at  http://www.cisco.com/netbeyond  today. 


Copyright  ©  1996.  Cisco  Systems,  Inc.  All  rights 
reserved.  Printed  in  USA.  Cisco  Systems,  NetBeyond, 
and  Cisco  IOS  are  trademarks,  and  Cisco,  the  Cisco 
Systems  logo,  FastHub,  and  EtherSwitch  are  registered 
trademarks  of  Cisco  Systems,  Inc.  All  other  trademarks 
and  registered  trademarks  are  the  property  of  their 
respective  owners. 


WANs  &  Internetworking 


Briefs 


■  To  boost  its  toll-free  services, 
British  Telecommunica¬ 
tions  pic  is  installing  the  Net¬ 
work  Intelligent  CallRouter 
( ICR)  software  from  GeoTel  Com¬ 
munications  Corp.  in  Littleton, 
Mass.  Network  ICR  enables  carri¬ 
ers  to  route  a  company ’s  800 
calls  based  on  agent  availabil¬ 
ity  and  other factors  to  multiple 
call  centers  with  otherwise 
incompatible  automatic  call  dis¬ 
tributors  on  the  premises. 


■  Bell  Atlantic  NYNEX 
Mobile  last  week  announced 
Code  Division  Multiple  Access 
( CDMA )  service  in  Washington, 
D.C.,  Baltimore,  Pittsburgh  and 
Charlotte,  N.C.  DigitalChoice,  an 
800-MHz  digital  cellular  ser¬ 
vice,  offers  users  enhanced  pri¬ 
vacy  and  better  call  quality  than 
analog  cellular  services. 

Most  scanners  used  to  eaves¬ 
drop  on  wireless  calls  are  ana¬ 
log-based,  which  makes  it  almost 
impossible  to  listen  in  on  a  digi¬ 
tal  call.  Another  benefit  for  users 
is  that  the  services  are  compati¬ 
ble  with  analog  cellular  services 
because  the  CDMA  phones  are 
dual  mode. 

The  service  is  available  for 
$14.99  to  $24.99 per  month, 
depending  on  the  service  area. 
Bell  Atlantic  NYNEX  Mobile  said 
it  will  offer  DigitalChoice  service 
in  all  of  its  analog  cellular  ser¬ 
vice  areas  by  mid-1997. 

Bell  Atlantic  NYNEX  Mobile: 
(800)255-2355. 


■  MCI  Communications 
Corp.  has  named  Robert  Kamba 
senior  vice  president  of  network 
operations.  A  23-year  MCI  vet¬ 
eran,  Kamba 
previously 
was  vice  presi¬ 
dent  of  infor¬ 
mation 
technology, 
where  he 
supervised 
data  centers, 
applications 
development  and  customer 
service. 

In  his  new  position,  Kamba 
will  oversee  the  carrier’s  entire 

global  network. 


Kamba 


Covering:  Local  and  Long-Distance  Services  •  Value-Added  Networks  •  Cable,  Satellite 
and  Wireless  Networks  •  Regulatory  Affairs  •  Carrier-Based  Internet  Services 


Business  analysis 


PSINet  may  be  facing  rough  ride 


By  Chris  Nerney 

Herndon,  Va. 

Poor  marketing  and  a  mis¬ 
guided  wholesaling  strategy 
likely  will  spell  trouble  in  1997 
for  Internet  service  provider  PSI¬ 
Net,  Inc.  .industry  analysts  said. 

The  company  earlier  this 
month  announced  that  total  rev¬ 
enue  for  1996  will  be  lower  than 
it  had  previously  estimated.  PSI¬ 
Net  cited  as  a  major  contributor 
to  the  shortfall  “slower  than 
expected  revenue”  from  the 
wholesale  ISP  business,  which  it 
began  last  summer. 

PSINet  last  year  shifted  its 
business  model  from  retail  to 
wholesale  services  and  products 
to  consumer-based  ISPs. 

That  was  a  mistake,  according 
to  Mark  Roberts,  a  senior  analyst 
and  principal  at  Montgomery 
Securities  in  San  Francisco. 


See  how  PSINet,  with  its  current 
stock  and  financial  info,  stacks  up 
against  competitors. 
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“PSINet  is  trying  to  sell  into  a 
market  that’s  going  away,”  Rob¬ 
erts  said.  “The  ISP  shakeout  has 
begun.” 

And  while  PSINet  founder 
and  Chief  Executive  Officer  Wil¬ 
liam  Schrader  predicted  “mean¬ 
ingful  revenue  growth”  from  the 
wholesale  business  unit  in  the 
first  two  quarters  of  ’97,  Roberts 
said  he  expects  otherwise.  “PSI¬ 
Net  likely  will  continue  to  have 
disappointing  results  from  its 
wholesale  strategy,”  he  said. 

David  Goodtree,  an  analyst  at 
Forrester  Research,  Inc.  in  Cam¬ 
bridge,  Mass.,  agreed  that  “try¬ 
ing  to  shift  from  a  consumer 
market  to  a  business  market  is 
hurting  [the  7-year-old  com¬ 
pany].” 

Goodtree  also  said  PSINet 
suffers  from  an  all-too-familiar 
problem  in  the  high-tech  uni¬ 
verse  —  good  products,  weak 
marketing. 

Another  analyst  who  asked 
not  be  be  identified  said  PSINet 
has  valuable  assets.  “They  have  a 
good-size  installed  customer 
base  and  are  quite  progressive 
about  rolling  out  services,”  the 
analyst  said. 

However,  she  added,  “Time  is 
not  on  their  side.  They  can  sur¬ 
vive  for  the  short  term  on  their 
own.  In  the  long-term,  it  will  be 
more  difficult.”  ■ 


International  network  services 
caught  in  tariff  cross  fire 


By  David  Rohde 

Washington,  D.  C. 

If  you  buy  international  net¬ 
work  services,  a  recent  govern¬ 
ment  ruling  could  create  a 
headache  for  you  and  your  car¬ 
rier  at  contract  negotiation  time. 

Carriers  and  users  are  discov¬ 
ering,  to  their  chagrin,  that  the 
Federal  Communications  Com¬ 
mission’s  recent  decision  abol¬ 
ishing  long-distance  tariffs  only 
applies  to  domestic  services. 

As  a  result,  carriers  must  now 
provide  new  multiyear  deals  on 
ordinary  commercial-law  con¬ 
tracts  excluding  international 
services,  which  remain  under 


tariff.  To  add  to  the  confusion, 
carriers  and  user  groups  only 
agree  on  the  problem,  not  the 
solution. 

The  SDN  Users  Association,  a 
group  of  450  users  of  AT&T’s 
Software  Defined  Network  ser¬ 
vice,  last  month  told  the  FCC  it 
simply  should  remove  tariffs  on 
international  services,  as  well. 

“This  would  simplify  the 
negotiation  process  and  would 
allow  large  customers  to  include 
all  of  their  telecommunications 
services  in  one  contract,”  wrote 
Reginald  Bernard,  the  group’s 
president,  in  a  petition  to  the 
See  Tariffs,  page  18 


Cascade  sets  priorities 
for  frame  relay  vendors 


By  Tim  Greene 

Westford,  Mass. 

Cascade  Communications 
Corp.  last  week  introduced  soft¬ 
ware  to  support  specific  levels  of 
frame  relay  service  quality  so  car¬ 
riers  can  guarantee  on-time 
delivery  of  tempermental  traffic 
types,  such  as  SNA  and  voice. 

Priority  Frame  for  Cascade  B- 
STDX  8000  and  9000  switches 
will  do  that  by  supporting  four 
different  service  levels  tailored 
to  specific  traffic:  top  priority  for 


switch.  The  new  technology 
chops  up  those  longer  frames 
into  shorter  ones  —  280  bytes  or 
less  —  which  cuts  delay  and 
makes  for  a  more  even  flow. 

The  software  also  enables  car¬ 
riers  to  set  four  distinct  qualities 
of  service  (QoS)  on  the  switch. 
Each  class  of  service  is  assigned 
to  a  separate  queue  supported  by 
permanent  virtual  circuits 
(PVC)  large  enough  to  guaran¬ 
tee  a  particular  QoS. 

Priority  Frame  addresses 


FRAME  RELAY  QUALITY  OF  SERVICE 

Cascade’s  Priority  Frame  assures  delay  and  frame  loss  will  stay  within  bounds. 


A  mixed  bag  of  high-  to  low-  The  switch  cuts  all  traffic  into 

priority  traffic  enters  the  switch.  frames  280  bytes  long  or  less 

to  prevent  long  frames  from 


video;  then  voice;  then  LAN-to- 
LAN  and  business  ’Net  access; 
and  finally,  E-mail,  file  transfer 
and  residential  ’Netaccess. 

Carriers  have  to  embrace  the 
technology  for  users  to  take 
advantage  of  it,  and  some  carri¬ 
ers  have  shown  interest. 

Frame  relay  specialist  Inter¬ 
media  Communications,  Inc. 
(ICI)  in  Tampa,  Fla.,  said  it  will 
integrate  Cascade’s  software 
enhancements  into  its  network 
by  the  end  of  the  second  quarter. 

Based  on  Priority  Frame’s 
capabilities,  ICI  will  guarantee 
the  performance  required  by 
specific  applications,  according 
to  Greg  Tennant,  director  of 
marketing  services  at  ICI. 

Priority  Frame  helps  address 
delays  introduced  when  high- 
priority  packets  get  stuck  waiting 
around  for  long,  low-priority 
packets  to  pass  through  the 


delay  and  packet  loss  within  a 
Cascade  network,  but  not  the 
access  circuit,  said  Christopher 
Nicoll,  an  analyst  at  Decisys,  Inc., 
a  consultancy  in  Sterling,  Va. 

To  do  that,  users  would  have 
to  buy  separate  PVCs  for  each 
QoS  they  wanted,  which  would 
drive  up  the  overall  cost. 

Cascade  is  among  three  ven¬ 
dors  and  three  carriers  that  have 
asked  the  Frame  Relay  Forum  to 
standardize  definitions  of  delay 
and  frame  loss,  which  are  key  to 
writing  service-level  guarantees. 

Other  switch  vendors  have 
similar  answers.  Northern  Tele¬ 
com,  Inc.’s  Passport  switch  has 
Multiple  Priority  System,  which 
is  structured  around  switching 
queues,  said  John  Cassadonte, 
product  manager  at  Nortel. 

Senior  Writer  Denise  Pappalardo 
contributed  to  this  story. 
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TCG  pays  $67  million  to  CERFnet 


By  Denise  Pappalardo 

New  York 

If  you  can’t  build  it,  buy  it.  This  is  the 
philosophy  Teleport  Communications 
Group  (TCG)  followed  earlier  this  month 
when  it  announced  plans  to  acquire 


CERFnet,  a  San  Diego-based  Internet  ser¬ 
vice  provider  ( AW, Jan.  20,  page  8) . 

The  joint  company’s  first  move  will  be 
to  offer  dedicated  Internet  access  in  seven 
new  markets  during  the  next  six  months. 
Analysts  agreed  this  is  a  favorable  move 


for  TCG  for  competitive  reasons.  For 
CERFnet,  it  means  survival,  they  added. 

CERFnet  lacked  the  entrepreneurial 
spirit  of  many  of  its  competitors  because 
the  Internet  is  not  the  prime  business  of 
General  Atomics,  CERFnet’s  parent  com¬ 
pany,  said  Rebecca  Wetzler,  director  of 
Internet  services  at  TeleChoice,  Inc.,  a 
Verona,  N.J.-based  consultancy. 
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Introducing  VIPSLAN-10: 10Mbps  Ethernet  Compatible  Infrared  Wireless 
LAN  System —  Bringing  a  New  Level  of  Ease  to  LAN  Installation 


Network  managers  have  a  new  option  when 
configuring  10Mbps  Ethernet  compatible  LAN 
installations:  VIPSLAN-10,  designed  for  environments 
where  wireless  connectivity  makes  sense.  Ideal  as  an 
addition  to  existing  wired  installations,  VIPSLAN-10 
is  perfect  for  temporary  workgroups, 
facilities,  or  immediate  installation 
requirements.  (X  use  VIPSLAN-10  in 
manufacturing  facilities,  warehouses, 
older  buildings  and  other  situations 
which  don’t  lend  themselves  to 
traditional  wiring. 

A  LAN  Without  Limits 

No  special  software,  gateways  or 
protocol  setup  required.  With 
VIPSLAN-10  your  data  transmission 
is  secure  and  completely  Ethernet 
compliant.  And  only  VIPSLAN-10 
provides  servo-controlled  infrared  beam 
adjustment  and  signal-locking  features. 


VIPSLAN-10  is  ideal  for  temporary 
LAN  requirements  and  situations 
which  don't  lend  themselves  to 
traditional  wiring,  such  as:  temporary 
workgroups,  manufacturing  facilities, 
warehouses  and  older  buildings. 


The  VIPSLAN-10  system — which  can  be  installed  in  as 
little  as  four  hours —  is  comprised  of  six  optional 
components.  The  three  primary  configurations  are: 

1.  360°  ceiling-mounted  Satellite-Node 
configuration  supporting  multiple  users 

2.  Station-Station  for  point-to-point 
connection 

3.  PCMCIA  Type  II  card  &  Mobile 
unit  for  direct  laptop  to  Ethernet 
connection 


Expand  Your  Options! 

Lor  free  information  about  how  you  can 
expand  your  LAN  installation  options 
with  VIPSLAN-10,  simply  call  today. 

714/816-6500 


JVC 


Today,  CERFnet  offers  dedicated  T-3 
access  to  cities  such  as  San  Francisco,  Los 
Angeles  and  San  Diego,  and  dial-in  access 
nationwide,  said  Pushpendra  Mohta, 
CERFnet’s  executive  vice  president. 
TCG’s  national  installed  net  and  its  38- 
GHz  wireless  licenses  will  let  CERFnet 
expand  its  reach. 

Although  CERFnet  plans  to  expand  its 
private  backbone  from  45M  bit/sec  to 
155M  bit/sec,  TCG  has  no  immediate 
plans  to  use  it  to  offer  commercial  long¬ 
distance  services.  Currently,  TCG  offers 
only  local  services,  including  LAN  inter¬ 
connect,  Synchronous  Optical  Network 
(SONET),  private  lines,  Centrex,  voice 
mail  and  connections  to  local  and  interex¬ 
change  carrier  points  of  presence. 

The  company  said  it  expects  to  offer 
deals  for  users  that  bundle  Internet  access 
service  with  other  TCG  services. 

Senior  Writer  Tim  Greene  contributed  to 
this  story. 


Tariffs 

Continued  from  page  1 7 

commission.  Other  user  groups  chimed  in 
with  similar  pleas  (see  graphic). 

But  in  a  nearly  simultaneous  petition, 
AT&T  suggested  the  opposite  solution: 
Temporarily  put  multiyear  domestic  term 
deals  back  under  tariff  for  users  that  want 
to  bundle  domestic  and  international 
services.  Alternatively,  AT&T  said  the  FCC 
could  leave  it  up  to  the  carrier  whether  to 
put  the  entire  deal  under  an  ordinary  con¬ 
tract  or  a  tariff. 


Count  me  in 


Companies  and  user  groups  filing  petitions  to 

detariff  international  services: 

•  SDN  Users  Association 

•  Ad  Hoc  Telecommunications  Users  Committee 

•  California  Bankers  Clearing  House  Association 

•  New  York  Clearing  House  Association 

©  ABB  Business  Services 

•  Prudential  Insurance  Co.  of  America 

SOURCE:  FCC.  WASHINGTON,  D.C. 

AT&T  said  the  problem  is  urgent, 
because  at  the  time  the  FCC  ordered  the 
abolition  of  tariffs  last  October,  AT&T  had 
more  than  2,000  mixed  domestic  and 
international  customer  deals  in  the  pipe¬ 
line. 

To  sweeten  its  offer,  AT&T  said  it  would 
allow  a  new  rider  to  be  placed  on  mixed 
tariffed  deals:  a  certification  of  customer 
consent  to  any  future  tariff  filing  that 
alters  a  term  plan.  The  right  of  carriers  to 
alter  tariffed  deals  midcourse  is  the  prac¬ 
tice  that  provoked  users’  ire  and  led  the 
FCC  to  abolish  tariffs  in  the  first  place. 

The  FCC  will  have  to  resolve  the  prob¬ 
lem  in  the  shadow  of  a  lawsuit  filed  by  MCI 
Communications  Corp.  in  federal  appeals 
court  to  overturn  the  entire  decision.  MCI 
is  expected  to  argue  that  almost  every 
party  that  filed  comments  on  the  FCC’s 
proposal  to  abolish  tariffs  opposed  the 
idea  —  large  user  groups  being  the  key 
exception.  ■ 
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(Then  reject  that  idea,  chuckle  heartily  to  yourself 

and  come  visit  our  Web  site.) 
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Address  |http://www.  microsoft.com/sql/ 

There  are  a  couple  of  things  that  make  Microsoft* 
SQL  Server™  the  smartest  foundation  for  your  data 
warehouse  solution.  First  is  cost:  a  Microsoft  SQL-based 
solution  will  avoid  the  (potentially  huge)  setup  and 
administration  expenses  associated  with  the  other,  more 
complicated  approaches.  Second,  there’s  the  Microsoft 
Alliance  for  Data  Warehousing,  an  association  of 
industry  leaders  formed  to  help  foster  standards  and 


ensure  interoperability  across  products  and  systems. 
Thanks  to  the  Alliance,  you  know  Microsoft  SQL 
will  integrate  with  other  products.  Which  in  turn  saves 
you  time  and  trouble  and,  come  to  think  of  it,  more 
money.  All  told,  Microsoft  SQL  Server  is  the  simplest. 
most  flexible  and  most  affordable  approach  to  data 

warehousing  on  the  market.  For  all  the  details,  visit  our 
Web  site  at  www.microsoft.com/sql/. 


Microsoft 

Where  do  you  want  to  go  today?*  www.microsoft.com/sql/ 
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Well,  some  people  are  very  excited  by  our  new 


Is  that  so  wrong? 


INTERNET  ACCESS  SOLUTIONS  WAN  BACKBONE  SOLUTIONS  TOKEN  RING  SOLUTIONS  IBM /SNA  SOLUTIONS  SMALL  BUSIN 


©1996  3Com  Corporation.  3Com,  Parallel  Tasking  and  TokenLink  are  registered  trademarks  and  Velocity  and  Networks  That  Go  the  Distance  are  trademarks  of  3Com  Corporation.  *One  per  customer  site,  while  supplies  last.To  learn  more,  visit  our  World  Wide  Web  site  at  http://www.3coni 
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The  3Com  TokenLink®  Velocity™  ISA  Network  Interface  Card  was 
bound  to  get  some  people  a  little  excited.  That’s  because  it  really 
is  a  true  innovation.  For  the  first  time  ever,  Token  Ring  networks 
can  get  the  high  performance  that  Parallel  Tasking®  technology 
provides.  It’s  the  same  advantage  3Com’s  given  to  over  25  million 
Ethernet  users. 

Parallel  Tasking  technology  gives  you  the  fastest  network 
throughput  available  as  it  pipelines  data  between  the  PC  and  the 
network.  So  you  can  transfer  data  faster  than  ever  before. 

The  3Com  TokenLink  Velocity  ISA  NIC  offers  more  than  just 
Parallel  Tasking  technology.  It’s  backwards  compatible  with 
existing  drivers,  applications  and  network  operating  systems. 
And  if  you’re  considering  switches,  it  has  Full  Duplex/DTR 
capability,  which  lets  you  send  and  receive  data  simultaneously. 

To  help  you  get  your  hands  on  one  of  these  innovative  new 
cards,  we’re  offering  evaluation  pricing  for  just  $99* 

Call  l-800-NET-3Com,  Option  4  to  get  yours. 

And  learn  why  Parallel  Tasking  technology  is  something  to  get 
excited  about. 
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things  Just  weren't  meant 

to  be  taken  down. 


Your  WAIM  is  one  of  them. 

Any  integrated  access  device  can  provide  a  WAN  connection,  but  it  takes  Opera ™  to  keep  it  live,  even  while  reconfiguring  the 
system,  implementing  new  network  applications  or  adding! replacing  system  modules. 

The  new  paradigm  of  software  controlled  telecommunications  integration  of  data,  voice,  video  and  imaging  over  T1  begins  right 
here,  right  now!  With  Opera,  you  get  it  all;  prEVENT  Mapping ™  for  alarm  trig¬ 
gered  network  reconfiguration,  programmable  disaster  recovery  and  back-up,  auto¬ 
matic  bandwidth  allocation,  and  proactive  configuration  scheduling. 

So  remember,  if  you  want  real  usable  integrated  access,  it  has  to  be  Opera.  For 
details  and  a  FREE  white  paper  on  Integrated  Access  call  800  522-8155  or  visit 
www.teleprocessing.com 

Teleprocessing 
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. . .  the  WAN  access  people 
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bandwidth  does  nothing  for  improving 
worker  performance  if  the  benefit  is  more 
than  eaten  up  by  ballooning  application 
file  sizes.  The  point  of  adding  in  greater 
access  bandwidth  is  to  increase  productiv¬ 
ity,  not  merely  keep  up. 

This,  if  nothing  else,  points  to  the  need 
for  using  program  applets  stored  centrally 
on  a  network  instead  of  locally  storing 


WAN  MONITOR 

The  big  nemesis:  Microsoft  file  sizes 


these  huge  software  programs  on  every 
machine  since  most  people  don’t  use 
most  of  the  features  most  of  the  time. 

Briere  is  president  and  Heckart  is  director  of 
broadband  with  TeleChoice,  Inc.,  a  consul¬ 
tancy  in  Verona,  N.J.  They  can  be  reached  at 
dbriere@telechoice.com  and  checkart@tele- 
choice.  com. 


hour  in  transfer  time,  tying  up  the  E-mail 
program  for  the  duration. 

The  application  software  and  net  work 
hand-in-hand.  Doubling  your  access 
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Ohis  year  could  probably  be  called 
the  year  of  “one  step  forward,  one 
step  back.” 

We  expect  to  continue  taking  serious 
steps  forward  in  making  higher  speed 
access  into  the  home  and  office  more 
ubiquitous.  Switched  56K  bit/sec  is  roll¬ 
ing  out  in  Internet  service  provider  cen¬ 
tral  offices,  ISDN  is  continuing  its  slow 
growth  across  the  U.S.,  and  cable  modems 
and  xDSL  are  rolling  out  at  their  own 
deliberate  pace. 

Things  were  looking  rosy  going  into 
1997... until  Microsoft  Corp.  came  out 
with  Office97.  It  represents  Microsoft’s 
next  big  upgrade  of  the  major  programs 
—  Word,  Excel  and  PowerPoint.  You  can¬ 
not  ignore  anything 
that  Microsoft  does, 
and  certainly  nothing 
as  bigasOffice97. 

The  problem  is 
Office97  continues 
the  trend  toward  big¬ 
ger  files  —  much  big¬ 
ger  files.  Several  early 
looks  by  some  of  the 
computer  trade  publi¬ 
cations  and  online 
resources  have  made 
only  slight  notations 
about  operational 
specifications  in  their 
reviews,  to  the  point 
where  we  wonder  if 
they  see  the  problem. 
Their  focus  has  been 
instead  on  the  new 
functionality  and  the 
greater  integration  of 
Internet  Explorer.  But  the  difference  in 
file  size  is  not  minor.  If  you  open  an 
Excel95  file  and  then  save  it  in  Excel97 
format,  it  increases  in  size  by  40%,  at  least 
according  to  some  accounts. 

Wow,  here  we  are  all  excited  that  we  are 
doubling  our  33. 6K  bit/sec  modem 
access  to  56K  bit/sec,  or  installing  ISDN, 
and  the  software  is  taking  that  progress 
away  with  file  size  increases.  Not  to  men¬ 
tion  what  it  does  to  your  hard  drive.  Don’t 
think  you  can  take  a  3-year-old  computer 
and  load  new  versions  of  these  old  favor¬ 
ites  and  still  have  any  meaningful  produc¬ 
tivity  without  adding  more  memory  or 
boosting  the  drive.  All  this  can  really  hit 
your  remote  access  strategies  hard,  not  to 
mention  your  WAN  plans. 

We  have  a  lot  of  small  remote  offices  in 
our  company,  and  lately  we  have  been 
using  Internet-accessible  versions  of  our 
E-mail,  calendaring,  contact  database  and 
other  internal  software  programs. 

Our  initial  tests  with  large  files  of  the 
size  promised  by  Office97  reveal  a  whole 
new  layer  of  complexity  and  problems. 
The  biggest  problem  for  us  is  enclosures 
to  E-mail;  a  document  from  a  publishing 
program  can  grind  the  inbound  E-mail  to 
a  screeching  halt.  One  enclosure,  a  mere 
2M  bytes,  recently  took  more  than  a  half 
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In  the  race  to  provide  end-to-end  access  to  ATM  solutions,  one  technology  is  head  and  shoulders  above  the  rest.  Introducing  the  COLOSSAS™  family  of 
innovations  from  GDC.  Leveraging  GDC’s  25  years  of  experience,  these  special  services  access  systems  are  the  industry’s  most  robust  and  comprehensive 
suite  of  end-to-end  multi-service  products— from  the  copper  loop  through  the  network  backbone,  including  frame  relay  and  ATM  switching.  While  others  limit 
access  from  the  central  office,  COLOSSAS  is  the  only  comprehensive  solution  that  teams  proven  access  technologies  like  DSL  and  V.34  with  advanced  ATM 
switching  capabilities.  You’ll  be  first  to  market,  first  to  earn  revenues  from  innovative  services  right  now  with  COLOSSAS.  And,  with  a  proven  track  record  in  20 
countries  around  the  world,  nothing  matches  the  reliability  or  scalability  of  COLOSSAS.  It’s  a  breed  apart 
Contact  GDC  to  learn  more.  We’ll  give  you  the  horsepower  you  need  to  compete  in  today’s  market.  And  win 


General  DataComm 


Call  1  -800-SWITCH-ON 

http://www.gdc.com 


Right  for  Today .  Ready  for  Tomorrow. 


Briefs 


■  Novell,  Inc.  has  released 
beta  software  that  lets  adminis¬ 
trators  centrally  manage  Win¬ 
dows  NT  3.51  and  4. 0  work¬ 
stations  via  Novell  Directory 
Services  (NDS).  Workstation 
Manager  synchronizes  the  work- 


Workstation  Manager 

station  user  IDs  and  passwords 
with  those  of  the  network,  giving 
end  users  a  single  logon  process. 
Administrators  can  manipulate 
NT  workstation  management 
utilities  through  NDS. 

Workstation  Manager,  which 
will  ship  as  part  of  Novell’s 
IntranetWare  client  for  NT  next 
month,  is  now  available  via  the 
Web  at  support.novell.com/home/ 
pubbeta. 

Novell:  (888)  3214272. 

■  Lantronix,  Inc.,  a  hub 

maker  based  in  Irvine,  Calif.,  has 
unveiled  a  suite  o/Fast  Ether¬ 
net  repeaters.  The  devices, 
which  come  in  four-,  eight-  and 
12-port  versions,  provide  custom¬ 
ers  with  100M  bit/sec  Ethernet 
connections  for  workgroups  and 
can  be  used  to  link  to  Fast  Ether¬ 
net  switches  and  servers.  Pricing 
for  the  hubs  starts  at  $495,  and 
all  products  will  be  available  in 
February 

Lantronix:  ( 800)  422-7055. 

■  3Com  Corp.  last  week  an¬ 
nounced  it  has  pa  rtnered 
with  several  PC  vendors  — 
including  Dell  Computer 
Corp.,  Gateway  2000,  Inc. 
and  Hitachi  PC  Corp.  —  to 
deliver  PCs  preconfigured  with 
3Com  network  interface  cards. 
The  program,  dubbed  3Com  Net¬ 
work  Ready,  helps  eliminate 
costs  associated  with  installation 
and  configuration. 

3Com:  (408)  764-5000. 


Local  Networks 

Covering:  Servers  •  Operating  systems  •  LAN  management 
Hubs  •  Switches  •  Adapters  and  other  equipment 


Intel  sets  networking  course 

Recent  acquisition  of  Case  and  investment  in  Xircom  add  to  momentum. 


By  John  Robinson 

On  the  network  court  six 
years  ago,  Intel  Corp.  would  have 
been  picked  last  for  a  game  of 
switching,  routing  and  hubs.  The 
company  simply  was  not  an  inter¬ 
networking  player. 

But  Intel  has  been  working  on 
its  game  through  internal  devel¬ 
opment,  partnerships  and  acqui¬ 
sitions.  It  is  sending  a  signal  to 
established  net  players:  Put  me 
in  the  game,  and  for  Fast  Ether¬ 
net,  make  me  team  captain. 

With  the  $72  million  acquisi¬ 
tion  this  month  of  Case  Technol- 


net  market. 

•  Lower  the  cost  of  ownership 
and  operation  for  networked 
computers. 

•  Provide  a  higher  bandwidth 
network  infrastructure. 

But  some  wonder  why  the  pro¬ 
cessor  powerhouse  is  focusing  on 
the  crowded  network  market¬ 
place. 

“I  am  a  little  befuddled  by  the 
extent  to  which  Intel  is  spreading 
its  wings,”  said  Virginia  Brooks, 
director  of  network  research 
with  Boston-based  Aberdeen 
Group,  Inc.  ‘‘How  successful  can 


any  company  be  when  compet¬ 
ing  on  a  broader  number  of 
fronts?” 

Christensen  admitted  Intel  is 
late  to  market  but  says  develop¬ 
ment  of  Fast  Ethernet  will  propel 
the  division’s  growth.  The  com¬ 
pany  delivered  a  10M/100M  bit/ 
sec  Fast  Ethernet  adapter  in 
October  1994,  and  promises 
switching  products  this  year  (see 
graphic). 

“We  think  we  are  tied  with 
3Com  for  Fast  Ethernet,”  Chris¬ 
tensen  said,  adding  that  Intel’s 
reseller  channel  and  “core  com¬ 


petencies”  will  push  the  com¬ 
pany  ahead. 

Intel  is  also  tackling  network 
management,  building  on  an  ini¬ 
tiative  last  year  with  IBM  to  lower 
operational  costs  for  networked 
PCs.  Industry  observers  said  it  is 
no  mystery  why  Intel  and  others 
are  focusing  on  this  area. 

“The  Intel  announcement 
was  a  defensive  move,  as  some  of 
the  PC  manufacturers  are  com¬ 
ing  out  with  network  comput¬ 
ers,”  said  Bob  Sakakeeny,  an 
analyst  with  Aberdeen  Group. 
“Itwasn’tasurprise.” 

Christensen  agreed.  “The 
whole  concept  of  the  thin-client 
PC  maybe  woke  us  up  a  bit,”  he 
said,  adding  that  Intel  is  working 
with  partners  to  counter  network 
computers  with  network  PCs  — 
desktops  with  varying  degrees  of 
functionality  that  can  be  set  by  an 
administrator. 

Analysts  generally  agreed 
Intel  has  the  ability  to  manufac¬ 
ture  competitive  network  prod¬ 
ucts,  but  warned  that  making  a 
name  for  itself  in  this  market  seg¬ 
ment  and  gaining  customer  trust 
will  prove  more  difficult  than 
product  development. 

“The  things  Intel  has  done 
have  been  very  intelligent,” 
Brooks  said.  “I  just  wonder  how 
far  from  the  desktop  they  are 
going  to  roam  with  this  expan¬ 
sion.”  ■ 


INTEL'S  NETWORK  BUSINESS  BUILDING  BLOCKS 


May  1991:  Acquires 
LANSystems  to  form 
Network  Management 
Business  Unit. 

- 1 


■  May  1992:  Cofounds 
Desktop  Management 
Task  Force. 


r  October  1992:  Announces 
beta  of  LANDesk  software 
family  for  local  network 
management. 


r  October  1994:  Introduces 
10M/100M  bit/sec  Fast 
Ethernet  adapter. 


1997 


■  September  1995:  Introduces 
Express  Stackable  Hub  and  next- 
generation  EtherExpress 
PRO/ 100  Adapter. 


October  1996:  Forms 
alliance  with  IBM  to  reduce 
network  management  costs. 


December  1996:  Divides 
networking  products  into  two 
divisions  -  Network  Products 
and  Systems  Management. 


January  1997:  Acquires 
Case  Technology,  invests 
in  Xircom. 


Bay  expands  Ethernet  lineup 


ogy,  a  switching  and  router  com¬ 
pany,  and  a  $52  million  invest¬ 
ment  in  Xircom,  Inc.,  a  mobile 
communications  outfit,  Intel  ac¬ 
celerated  its  networking  growth. 

Intel  was  attracted  to  Case  for 
its  Fast  Ethernet  switch  technol¬ 
ogy,  and  for  its  10M  bit/sec 
switch,  which  Intel  officials  said 
gives  users  a  near-term  solution 
before  Fast  Ethernet  takes  hold. 
Intel  plans  to  start  selling  the 
switch,  and  Case’s  branch  office 
router,  by  April. 

Mark  Christensen,  vice  presi¬ 
dent  of  Intel’s  Internet  and  Com¬ 
munications  group  and  general 
manager  of  the  Network  Prod¬ 
ucts  Division,  claims  the  division 
earned  $500  million  in  revenue 
last  year,  including  revenue  from 
management  software  sales. 
Intel  reported  total  revenue  of 
$20.8  billion  for  1996. 

For  Intel  to  break  into  the  bil- 
lion-dollar  club,  it  needs  to  satisfy 
three  objectives: 

•  Focus  efforts  on  the  Fast  Ether- 


By  Jim  Duffy 

Santa  Clara,  Calif. 

Bay  Networks,  Inc.  has  ex¬ 
panded  its  BayStack  line  with 
new  Ethernet  switches,  hubs  and 
media  converters. 

The  company’s  BayStack  302 
switches  are  available  preconfig¬ 
ured  with  eight  half-duplex 
lOBase-T  ports  and  either  a 
100Base-TX  or  100Base-FX  port 
in  half-  or  full-duplex  mode.  The 
BayStack  302  supports  16,000 
media  access  control  (MAC) 
addresses. 

The  BayStack  50  Series 
includes  new  hubs  that  are  avail¬ 
able  in  four-,  eight-  and  16-port 
models.  They  are  designed  to 
provide  low-cost  connectivity  to 
individual  desktop  machines 
and  groups  of  workstations  in 
one  cubicle. 

Bay  also  rolled  out  its  Bay- 


Stack  30T  and  30F  Fast  Ethernet 
media  converters,  which  func¬ 
tion  as  MAC-layer  bridges.  They 
are  designed  to  provide  perfor¬ 
mance  gains,  integration  of  10M 
and  100M  bit/sec  nets,  and  cre¬ 
ation  of  100M  bit/sec  campus 
nets  using  fiber.  “Idon’tknowof 
any  other  big  vendor  that  has 
converters  like  that,”  said  Don 


Miller,  an  analyst  at  Dataquest, 
Inc.  in  Sanjose,  Calif. 

In  addition,  Bay’s  Commer¬ 
cial  Business  Unit  introduced  an 
entry-level  switch,  dubbed  the 
Model  2216T.  It  delivers 
switched  10M  bit/sec  to  the  desk¬ 
top  through  16  half-duplex 
lOBase-T  ports  and  boasts  1,042 
MAC  addresses  per  switch.  Also 
standard  for  the  2216T  is  a  half¬ 
duplex  100Base-T  port. 

©Bay:  (508)  670-8888. 


Bay  extends  Ethernet  hub  and  switch  lines 

• 

mm 

Product 

Pricing 

Availability 

BayStack  302  switch 

$2,495  (100Base-TX  uplink) 
$3,295  (100Base-FX  uplink) 

February 

BayStack  50  Series  hub 

$149  (4  ports) 

$259  (8  ports) 

$499  (16  ports) 

February 

BayStack  30  converter 

$1,095  (100Base-TX) 

$1,495  (100Base-FX) 

Now 

Model  2216T  desktop  switch 

$2,125 

Now 
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How  to  make  an  NT  price  comparison 


here’s  been  some  muttering  of  late 
about  the  increased  cost  of  Win¬ 
dows  NT  Server  4.0  compared  to  Version 


3.51. 1  went  to  the  horse’s  virtual  mouth  — 
Microsoft  Corp.’s  Web  site  —  to  check. 
The  first  thing  I  noticed  was  a  compari¬ 


son  of  buying  NT  Server  4  vs.  NetWare  4.1. 
For  150  users,  NT  Server  costs  $5,621, 
while  NetWare  costs  $13,380.  That’s  the 
base  price  for  NT,  while  NetWare’s  base  of 
$4, 199  was  increased  by  adding  in  services 
that  are  included  in  NT  Server. 

The  full  comparison  can  be  found  via 
the  Web  at  www.microsoft.com/win- 
dows/common/aa347.htm) . 


Astute  readers  will  see  that  most  of  the 
add-ons  for  NetWare  4.1  are  in  Novell, 
Inc.’s  new  IntranetWare  offering.  Based 
on  published  prices,  50-user  versions  of 
NT  Server  4.0  would  cost  $2,447,  while  a 
50-user  copy  of  IntranetWare  would  be 
$4,995.  Raise  that  to  250  users,  and  it  costs 
$9,037  for  NT  and  $12,495  for  Intranet¬ 
Ware.  (Prices  for  NT  can  be  found  at 
www.microsoft.com/windows/common/ 
aa268.htm,  and  prices  for  IntranetWare 
can  be  found  at  www.novell.com/cata- 
log/pl/pl  14 105.html.) 

Looks  like  NT  has  the  clear  lead,  right? 
Well,  it  depends  on  howyouviewit. 

Most  people  will  be  upgrading,  not 
buying  outright.  So  if  we  consider  upgrad¬ 
ing  NT  from  Version  3.51  to  4.0  and 
upgrading  NetWare  4.1  to  IntranetWare, 
what’s  the  price?  For  50  users,  the  NT 
upgrade  costs  $1,217,  while  the  change  to 
IntranetWare  costs  $995. 

One  reason  for  this  complication  is 
that  NT  is  priced  as  a  server  operating  sys¬ 
tem  plus  a  client 
access  license.  The 
client  access  license 
can  be  distributed 
by  two  methods  — 
per  server  or  per 
seat  —  and  must  be 
used  throughout 
the  enterprise. 

Per-server  licens-  Dave  Kearns 
ing  is  like  Novell’s 

connections-per-server  method;  with  250 
client  licenses,  no  more  than  250  simulta¬ 
neous  users  can  be  connected  to  that 
server.  With  two  NT  servers,  clients  would 
need  two  licenses  to  attach  to  both  simul¬ 
taneously.  With  per-seat  licensing,  clients 
can  connect  to  any  and  all  NT  servers  with 
only  one  license,  but  each  client  needs  a 
separate  license. 

If  you  have  only  one  NT  server,  then 
per-server  licensing  based  on  the  maxi¬ 
mum  number  of  simultaneous  clients 
would  be  the  clear  choice.  Suppose  there 
were  multiple  NT  servers,  andyou  run  two 
or  more  shifts.  Which  licensing  method 
do  you  choose,  and  what  will  it  cost? 

Here’s  your  homework:  Say  you  have 
three  NT  servers  and  500  people  who 
need  access  to  at  least  one  server.  Which 
method  is  best,  and  what’s  it  going  to  cost 
(based  on  the  prices  published  at  the  URL 
listed  above)?  Further  information:  The 
three  servers  have  maximum  concurrent 
usage  of  100, 150  and  250  clients.  Message 
me  with  your  answers  at  dkeams® 
msn.com,  and  I’ll  publish  the  correct 
answer  next  week. 


Hail  to  the  Chief!  If  the  President  of  the  United  States  is  looking  into 
it  -  it  must  be  important.  Browser-based  access  to  “legacy"  systems 
makes  existing  applications  and  data  more  widely  available  to  internal 
customers  over  intranets,  and  extends  this  infrastructure  to  cus¬ 
tomers,  distribution  channels,  and  business  partners  over  the  Internet. 

The  advantages  of  integrating  host  information  using  OpenConnect’s 
new  SNA  Web  co-processing  technology,  OC://WebConnecf ,  and  its 
companion  integrated  development  environment,  OpenVista'1,  have 
become  very  compelling.  OpenConnect  Systems’  browser-based  host 
access  increases  the  value  and  the  availability  of  SNA  mainframe  and 
midrange  applications  and  data  without  sacrificing  SNA  network 


performance,  management  or  security. 

Using  OpenVista,  you  can  rejuvenate  host  applications  with  graphical 
user  interfaces  and  offer  them  to  a  whole  new  class  of  users  with  less 
training,  and  little  or  no  distribution  costs,  You’ll  reduce  network 
bandwidth  utilization,  without  modifying  the  existing  host  applica¬ 
tion. 

To  learn  how  you  can  make  the  move  to  browser-based  access  for  your 
mainframe,  call  for  your  free  white  paper  which  outlines  the  business 
benefits  of  browser-based  host  access  and  rejuvenating  your  main¬ 
frame  applications.  Doing  so  will  make  you  appear  very  presidential. 


OpenConnect 

SYSTEMS 

Securely  Integrating  SNA  With  The  InterlintraNET" 


Kearns,  a  former  network  administrator,  is 
a  freelance  writer  and  consultant  in  Austin, 
Texas. 


Tip  of  the  week 


2711 LBJ  Freeway  •  Dallas,  Texas  USA  75234  •  1-800-551-5881  •  972-484-5200  •  http://www.oc.com  •  E-Mail:  info@oc.com 

Cl  996  OpenConnect  Systems  incorporated  OpenConnect  Systems  is  a  registered  servicemark  of  OpenConnect  Systems  Incorporated.  OpenConnect  and  all  OpenConnect  product 
names  are  trademarks  of  OpenConnect  Systems  Incorporated.  All  other  products  or  services  mentioned  herein  are  trademarks  of  their  respective  companies. 


In  response  to  my  recent  column  on 
NT  security,  one  reader  recommended  vis¬ 
iting  www.security-online.com,  a  new 
service  designed  to  become  a  central  repos¬ 
itory  for  security  information. 
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At  the  COMNET  '9 7  show  in  Washington,  on  February  5,  there  will  be  a  "Switching  Showdown? 
involving  3Com,  Bay,  Cabletron  and  Cisco,  the  billion-dollar  companies  in  our  industry.  Xylan  believes 
that  events  off  this  type  offfer  a  valuable  opportunity  for  users  to  compare  the  capabilities  off  vendors1! 
products.  We  urge  those  Network  World  subscribers  who  will  be  at  COMNET  '97  to  attend  this  event. 

It's  obvious  that  powerful  campus  switching  systems  require  much  more  than  simple  Ethernet 
switching.  So,  to  assist  those  who  will  be  attending  this  event,  we've  prepared  a  Switching  Scorecard 
off  capabilities.  Since  Xylan  is  not  represented,  we  have  completed  the  column  for  our  products. 


3Com 


Bay  Cabletron  Cisto 


Xyle  3Com 


Bay  Cabletron  Cisco 


LAN  Switching 

LAN  /  ATM  Integration 

any-to-any  MAC-layer  translation 

/ 

LAN  and  ATM  in  a  single  switch 

/ 

multi-RISC,  multi- ASIC  frame  switching 

/ 

full  slot  transparency:  any  slot  can  switch  cells  or  frames 

/ 

max  #  switched  Ethernet  ports 

96,™, 256,0.1 

cell  and  frame  modules  linked  with  high-speed  SAR  function 

/ 

Ethernet  lOBaseT,  10Base2,  10Base5,  lOBaseFL 

/ 

Routing  and  Security 

max  #  switched  Token  Ring  ports 

48 

Token  Ring  lobe,  device,  RI/RO,  UTR  STP,  fiber 

/ 

max  #  FDDI  ports 

16 

IP  RIP 

/ 

max  #  FDDI  TP/PMD  (CDDI)  ports 

64 

IPX  RIP 

/ 

max  #  100BaseTX  ports 

64,™, 96,0.1 

IP  RIP  II,  OSPF 

/  (Ql) 

max  #  100BaseFX  ports 

16.no*  >64(021 

IP  BGP4 

/<Q2) 

max  #  ATM  DS-3  /  E3  uplink  ports 

16 

IP  multicast  (DVMRP,  IGMP) 

/  (Ql) 

max  #  ATM  OC-3  uplink  ports 

16 

DHCP  BootP  relay 

/(Ql) 

max  #  ATM  OC-12  /  STM-4  uplink  ports 

8<Q2) 

high-speed  hardware-based  routing  engine 

/  (Ql) 

broadcast  throttling,  configurable  per  port 

/ 

IP  security  firewall 

/(Ql) 

802.  Id  transparent  Spanning  Tree  bridging 

/ 

network  number  translation 

/(Ql) 

source  route  /  transparent  bridging 

/ 

authenticated-user  VLANs 

/  <Q2) 

LAN  /  ATM  encapsulation  (RFC  1483) 

/ 

Virtual  LANs 

Classical  IP  over  ATM  (RFC  1577) 

/ 

ATM  Forum  LANE  client 

/ 

ATM  Switching 

automatic  policy-based  VLANs 

/ 

max  #  VLANs  per  network 

65.000 

max  #  VLAN  memberships  per  workstation  or  server 

31 

cell  matrix  fabric  rate 

13.2  Gbps.on 

VLAN  defined  as  a  collection  of  switch  ports 

/ 

single-stage  non-blocking  distributed  processing  cell  matrix 

/(Ql) 

VLAN  defined  as  a  list  of  MAC  addresses 

/ 

support  for  CBR,  rt-VBR.  nrt-VBR,  ABR,  and  UBR 

/(Ql) 

VLAN  defined  as  a  protocol  type 

/ 

max  #  traffic  priority  levels 

15.Q1) 

VLAN  defined  as  an  IP  subnet 

/ 

switched  and  permanent  point-to-point  circuits 

/(Ql) 

VLAN  defined  as  an  IPX  network  number 

/ 

switched  and  permanent  point-to-multipoint  circuits 

/  (QI) 

VLAN  defined  by  a  custom  field 

/ 

max  #  AAL1  T1  /  El  circuit  emulation  inputs 

16.Q2) 

VLAN  defined  as  a  multicast  group 

/ 

max  #  ATM  25  M  ports 

192.Q2) 

VLANs  trunked  across  FDDI 

/ 

max  #  ATM  DS-3  /  E3  ports 

48.Q2) 

VLANs  trunked  across  Fast  Ethernet 

/ 

max  #  ATM  OC-3  /  STM-1  ports 

64.QD 

VLANs  trunked  across  ATM 

/ 

max  #  ATM  OC-12  /  STM-4  ports 

16.QI) 

VLANs  trunked  across  frame  relay 

/ 

max  #  cell  buffers  per  switch 

2,097,1 52, q.> 

VLAN  membership  maintained  for  mobile  users 

/ 

max  #  cell  buffers  per  port 

131,072,qi. 

modified  802.10  VLAN  trunking 

/ 

max  #  virtual  circuits  per  port 

65,000, q„ 

IEEE  802.  lq  VLAN  trunking 

/  (Q2) 

load  balancing  between  parallel  links 

/  (Q>) 

WAN  Access 

ATM  Forum  LANE  server 

/(Ql) 

ATM  Forum  PNNI  1.0 

/  (Ql) 

ATM  Forum  IISP 

/(Ql) 

max  #  Frame  Relay  ports 

64 

ATM  Forum  UNI  3.0  and  3.1 

/  (Q!) 

V.35,  RS-232,  RS-422  /  RS-449.  RS-530,  and  X.21  ports 

/ 

ATM  Forum  Traffic  Management  4.0 

/  (Ql) 

routed  frame  relay 

/ 

Early  Packet  Discard  (EPD),  Partial  Packet  Discard  (PPD), 
Random  Early  Detect  (RED) 

/  (Ql) 

switched  frame  relay  integrated  with  VLANs 

/ 

multiple  VLANs  in  a  single  DLCI 

/ 

Explicit  Rate  and  Relative  Rate  flow  control 

/(Ql) 

Frame  Relay  Forum  data  compression  (FRF.9) 

/ 

Explicit  Forward  Congestion  Indication  bit 

/(Ql) 

max  #  individual  compression  code  tables  for  virtual  circuits 

200 

Platforms 

ISDN  BRI 

/(Q2> 

Network  Management 

all  platforms  share  software,  hardware,  ASICs,  and 
management  agent 

/ 

graphical  VLAN  management  application 

/ 

redundant  management  modules 

/ 

access  via  any  LAN  type.  ATM,  frame  relay,  serial  port, 
TELNET,  TFTP,  and  BootP 

/ 

hot-swappable  switching  modules 

/ 

hot  standby  ATM  line  protection 

/(Q2> 

graphical  traffic  management  application 

/ 

optical  bypass  support  for  FDDI 

/ 

graphical  RMON  application 

/ 

redundant,  load-sharing,  hot-swappable  power  supplies 

/ 

OpenView  for  Windows 

/ 

-48  VDC  power  option 

/ 

Open  View  for  Unix 

/ 

passive  backplane 

/ 

Sunnet  Manager 

/ 

hot-swappable  cooling  fans 

/(Ql) 

NetView  for  AIX 

/ 

Bring  your  Switching  Scorecard  to  Xylan,  at  Booth  #390  Hall  C,  to  receive  a  free  200*page  "Switching  Book/1 
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Complete  Switching  Systems  for  the  Next  Generation  of  Computing. 

Xvftiii  Corporation  26679  West  Ayonra  Road.  Calabasas,  CA  91302  (H00)  999-9526  ■  (SIS)  SS0-3500  •  (SIS)  SSf)-3505fax  •  infiKaxylan.com  •  http:  www.xyhm.cbm 


Some  people  find 
editorial  comment 
more  credible  than 
advertising  copy. 

Cool. 


PC  World  said,  “The  (IBM)  Network  Printer  12’s 
$1250*  street  price  is  the  lowest  on  the  monochrome 
chart,  and  its  two-pages-per-minute  graphics  speed  is 
one  of  the  fastest.'”  (January  1997) 

Computer  Shopper  said,  “IBM  has  come  up  with  a 
winning  combination  for  medium-size  networks . . . 
that  need  reliable,  fast  printing. . . .  Installation 
of  the  Network  Printer  17  on  our  Ethernet 
network  was  one  of  the  quickest  and  easiest 
we’ve  ever  performed.”  (December  1996) 

PC  Magazine  said,  “The  IBM  Network 
Color  Printer  will  satisfy  the  needs  of 


both  business  users  who  need  simple  color  output 
for  reports  and  presentations  and  desktop  publishers 
who  want  nearly  photographic-quality  output.” 
(October  1996) 

IBM  Planting  Systems  Company  says,  “Call  us  now  at 
1  800  358-6661,  choose  the  ‘Printer  Selection  Center’  option, 
*#j|  and  find  out  more  about  the  network  printers 


lots  of  people  are  talking  about.”  If  you’d 


like  to  read  the  reviews  mentioned  here, 
visit  us  at  www.can.ibm.com/ibmprinters 


Solutions  for  a  small  planet™ 


quoted  in  PC  World.  Actual  prices  may  vary  from  dealer  to  dealer,  and  depending  on  offerings,  options. 

IBM  is  a  registered  trademark  ami  Solutions  for  a  small  planet  is  a  trademark  of  International  Business  Machines  Corporation.  All  other  company  and/or  product  names  are  registered  trademarks  or  trademarks  of  their  respective  owners.  ©1997  IBM  Corp.  All  rights  reserved. 
PC  Magazine  1996  ©  Ziff-Davis  1996. 
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Briefs 


■  Precept  Software,  Inc.  of 

Palo  Alto,  Calif.,  today  will 


announce  a  new  version  of  its 

IP/TV  video  distribution 
application  that  supports 
MPEG.  The  new  version  has  an 


enhanced  Slidecast  feature  that 
lets  video  presenters  and  their 
demonstration  materials  be  seen 
simultaneously  on  PC  screens. 

IP/TV  uses  standard  IP  multi¬ 
cast  and  is  available  as  a  cli¬ 
ent/server  application,  a  Netscape 
Communications  Corp.  browser 
plug-in  or  an  ActiveX  control.  It 
runs  on  Windows  95  and  NT. 
Prices  include  the  IP/TV  Server  at 
$1,995,  the  client  viewer  at  $195 
and  the  IP/TV  Program  Guide  at 
$995. 

Precept:  (415)  845-5200. 

■  JetForm  Corp.  of  Ottawa  this 
week  will  announce  JetForm  5.0, 
the  latest  version  of  its flagship 
electronic  forms  software 
suite.  The  release  includes  32-bit 
Dynamic  Forms  with  OLE  auto¬ 
mation  and  tighter  Web  links.  A 
general  release  is  planned  for 
March. 

JetForm:  (613)  230-3676. 

■  NobleNet,  Inc.  ofSouthbor- 
ough,  Mass.,  last  week  released 
NobleNet  Secure,  a  tool  set  for 
building  security  and  encryp¬ 
tion  into  networked  applications. 
The  domestic  version  comes  with 
software  interfaces  for  the  follow¬ 
ing  security  standards:  DES, 
RIVc4,  XOR,  MD5  and  SHA.  Pric¬ 
ing  is  $2,500 per  platform,  with  a 
five-user  license. 

NobleNet:  (508)  460-8222. 


Domino  tops  Lotusphere  agenda 

Web-based  technology  expected  to  be  front  and  center  at  annual  Lotus  get-together. 


By  Paul  McNamara 

Orlando,  Fla. 

When  the  denizens  of  Notes 
Nation  converge  on  Lotusphere 
’97  here  this  week,  they  will  be 
looking  to  get  a 
Mickey  Mouse-size  . 
earful  about  two  LOTUS 
topics:  Domino  and 
Java. 

Lotus  Development  Corp.’s 
popular  user  conference  kicked 
off  on  Super  Bowl  Sunday  after 
selling  out  months  ago. 

1  ‘You  can  expect  the  emphasis 
to  be  on  Internet-related  tech¬ 
nology,”  said  Ken  Bisconti, 
Notes  marketing  manager. 
“There  will  be  some  pretty  excit¬ 
ing  stuff.” 

Whether  that  means  a  peek  at 
Notes  5.0,  neither  Bisconti  nor 
others  at  Lotus  would  divulge. 
But  Domino,  Lotus’  entry  in  the 
Internet  groupware  race,  will 
surely  be  on  display. 

“We’re  really  excited  about 
Domino,  and  I  think  most  peo¬ 
ple  going  to  the  show  are,  too,” 
said  Paul  Pinella,  director  of 
enterprise  product  manage¬ 
ment  at  Individual,  Inc.,  a  Lotus 
Business  Partner  in  Burlington, 
Mass. 

Individual’s  software,  First  for 
Lotus  Notes,  is  providing  a  news 
service  at  kiosks  sprinkled 
throughout  Lotusphere. 

Recruiting  additional  Dom¬ 
ino  converts  will  be  among  the 
key  goals  for  Lotus  during  its  five- 
day  Florida  lovefest,  said  David 
Marshak,  a  senior  consultant  at 
Patricia  Seybold  Group,  Inc.  in 
Boston. 

Marshak  said  the  company 
needs  to  address  its  internal 
“tension  [between]  promoting 
the  Notes  client  as  the  best  place 
to  live  and  promoting  browsers 
with  Java  as  the  ultimate  client, 
then  competing  on  the  server 
side  by  saying  Domino  is  much 
more  open  because  [it]  can  do 
calendar/scheduling  with  any¬ 
body’s  browser.” 

Having  quelled  most  notions 
of  the  Web  being  a  Notes  killer — 
at  least  for  the  moment  —  Lotus 
needs  to  build  momentum  in  the 
’Net  arena,  according  to  Rob 
Enderle,  an  analyst  at  Giga  Infor- 
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mation  Group  in  Santa  Clara, 
Calif. 

“[Lotusphere]  should  be 
focused  more  on  the  Domino 
aspect  of  the  offerings  and  less 
on  the  proprietary 
nature  of  the  plat¬ 
form,  and  a  certain 
amount  of  defocus- 
ing  on  the  desktop,” 
Enderle  said.  “  [This  means]  not 
as  much  emphasis  on  things  like 
SmartSuite  and  perhaps  a  little 
bit  heavier  emphasis  on  Compo¬ 
nents,  which  is  more  of  a  server- 
based  implementation.” 

Few  attendees  contacted  are 
expecting  anything  earth- 
shattering  to  be  announced. 
After  the  year  Lotus  had  in  1996 
—  shipping  the  Notes  4.5  client 
and  making  a  huge  splash  with 
Domino  4.5  server  —  expecta¬ 
tions  maybe  lower. 


“They  got  religion,  and  they 
migrated  Notes  into  the  intranet 
space,”  said  Doug  Savery,  staff 
director  at  NYNEX  Corp.  in 
Marlborough,  Mass.  Savery 
would,  however,  like  to  see  Lotus 


do  more  for  the  Notes  client. 

“They  have  left  the  Notes 
client  pretty  much  unchanged, 
and  the  major  development 
work  has  been  in  the  Internet 
and  being  able  to  have  the  client 
be  a  browser,”  he  said.  “But  a 
customer  with  a  Lotus  Notes  cli¬ 
ent  needs  that  interoperability 
with  that  Domino-formatted 
server.  They  need  to  make  it 
seamless.”  ■ 


Lotusphere  ’97  third-party  product  preview 

Vendor 

Announcement 

Details 

GWI  Software 
Vancouver,  Wash. 

Help  5.0,  help  desk  tool  for 

Notes  and  Domino  customers 

Adds  Web-based  self-help 
options;  routing  and  tracking 
of  incident  reports. 

Candle 

Santa  Monica,  Calif. 

IntelliWatch  Monitor  for  Notes 

4.5,  which  detects  and  corrects 
server  problems 

Includes  new  remote 
monitoring  and  recovery 
features. 

Casahl  Technology 
Danville,  Calif. 

Late  February  release  of  Replic- 
Action  4.5,  a  data  integration 
system 

Now  fully  Web-enabled  through 
Lotus  Domino  4.5  server. 

Trend  Micro 

Cupertino,  Calif. 

March  release  ofScanMailfor 

Lotus  Notes 

Detects  viruses  in  attachments 
to  cc:Mail  and  Notes 
databases  at  the  server. 

Information  broadcasting 

Wayfarer  refines  Web  cast  data 


By  John  Cox 

Mountain  View,  Calif. 

Wayfarer  Communications, 
Inc.  last  week  released  software 
to  help  companies  manage  the 
traffic  flooding  their  private 
Webs,  providing  end  users  with 
only  that  information  needed  to 
do  theirjobs. 

Incisa  is  based  on  Wayfarer’s 
Quickserver  message-based 
server,  which  uses  a  pro¬ 
prietary  protocol  to  en¬ 
sure  high-performance 
data  transmission  over 
low-bandwidth,  wide- 
area  links. 

Incisa  consists  of  new 
server  and  client  software 
that  condenses  informa¬ 
tion  to  a  headline  and 
summary.  It  provides  one 
or  more  links  the  desktop 
user  can  click  on  to  find 
the  full  story  and  related  infor¬ 
mation  on  the  ’Net  or  intranet. 

By  contrast,  other  Web  casting 
products  transmit  data  indis¬ 
criminately  to  all  subscribers. 

Ingenius,  an  Englewood, 
Colo.,  company  jointly  owned  by 


Tele-Communications,  Inc.  and 
Reuters  Holdings  PLC,  plans  to 
use  Incisa  for  delivering  multi- 
media  stories  and  as  many  as  20 
international  newsfeeds  into 
schools  via  the  Internet.  Jamie 
Durkee,  head  of  the  company’s 
research  and  development 
group,  reviewed  many  of  the 
most  popular  Web  casting  prod¬ 
ucts  before  selecting  Incisa. 


Compare  Incisa  s  push  mechanism  with 
those  of  other  Web  casters.  /  7- 

1/ 

Enter  the  number  to  the 

right  in  the  DocFinder  «  . 

box  on  the  home  page.  U  4  U 


;vp  Worm 


ttp://www.  nwfusion.com 


“Out  of  the  box,  this  product 
has  the  ability  to  push  informa¬ 
tion  over  the  Internet,  but  it  also 
gives  you  a  set  of  easy-to-use  tools 
to  control  the  flow  of  informa¬ 
tion  throughout  the  network,” 
he  said. 


To  get  this  same  capability 
with  other  tools,  Durkee  said, 
Ingenius  would  have  needed  to 
turn  high  school  teachers  into 
Webmasters  and  programmers. 
“With  Incisa,  they  can  insert 
their  own  data,  including  links  to 
internal  Web  sites  as  well  as  exter¬ 
nal  sites,  and  it’s  as  easy  as  send¬ 
ing  E-mail,”  he  said. 

Web  casting  products  used 
inappropriately  can  increase 
“information  clutter,”  warned 
Carl  Lehmann,  an  analyst  with 
META  Group  Inc.,  a  Stamford, 
Conn.-based  research  company. 
Corporate  users  should  look  for 
ways  to  integrate  these  products 
with  existing  E-mail  and  group- 
ware  systems,  he  said. 

“All  these  technologies  are 
[really]  components  of  a 
broader  concept  —  knowledge 
management,”  Lehmann  said. 
“Companies  are  trying  to  get  a 
handle  on  a  wide  range  of  infor¬ 
mation  resources .  ’  ’ 

Incisa  is  available  now.  Pricing 
starts  at  $50  per  concurrent  user. 
A  $5,000  license  lets  100  concur¬ 
rent  users  link  to  the  server  and 
includes  an  Internet  connection 
to  Wayfarer’s  operations  center, 
as  well  as  three  newsfeeds  and 
stockfeeds. 

©Wayfarer:  (800)  300-8559. 
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Client/Server  Applications 


SHARED  LOGIC 

Making  it  through  Oracle’s  middleware  maze 


onnecting  die  client  to  the  server  is 
what  client/server  is  supposed  to 
be  about.  Surprisingly,  it  remains  one  of 
the  most  confounding  problems  for 


application  developers  even  as  client/ 
server  enters  its  mature  years. 

A  case  in  point  is  Version  2.0  of  the  soft¬ 
ware  my  company  sells.  We’ve  added  a 


port  to  the  Oracle7  database,  and  sorting 
out  the  connectivity  issues  has  revealed 
the  amazing  complexity  of  creating  a 
seamless  interface  between  a  Windows- 


based  client  and  a  robust  back-end  server. 

While  Oracle  Corp.’s  software  support 
can  seem  unjustifiably  expensive,  with 
yearly  costs  as  high  as  50%  of  the  original 
cost  of  the  software,  lean  now  understand 
why  the  company  has  to  charge  so  much: 
It  requires  many  hours  per  customer  to 
configure  the  environment  correctly. 

The  Oracle  support  is  well  worth  the 
money.  The  technical  personnel  are  help¬ 
ful  and,  if  you  pay  for  it,  available  around 
the  clock. 

Of  particular  interest  to  us  was  how  to 
configure  the  middleware  layers  between 
our  program’s  SQL  logic  and  the  Oracle 
database.  Some  of  the  latest  middleware 
products  offered  by  Oracle  as  part  of  its 
new  Programmer  2000  package  include 
Objects  For  OLE  2.0,  SQLNet  2.3,  the 
Required  Support  Files  and  the  Oracle 
ODBC  driver  1.16. 

Oracle  helped  us  resolve  the  creation 
of  a  matrix  showing  which  Oracle  prod¬ 
ucts  were  already  compatible  with  each 
other,  and  which  products  were  poten¬ 
tially  compatible.  Oracle  can  guarantee 
that  all  of  its  latest  stuff  works  together, 
but  when  you  start 
to  mix  different 
releases  of  the 
components,  it’s  a 
crapshoot. 

This  is  all  fur¬ 
ther  complicated 
by  the  fact  that 
the  client  can  run 
in  a  16-bit  Win-  Marc  Myers 
dows  3.1  or  3.11 

mode,  or  in  a  32-bit  Windows  95  or 
NT  mode.  But  here  are  a  few  shortcuts  to 
help  you  set  up  the  Oracle  middleware 
environment: 

e  First,  determine  whether  your  software 
will  be  16-bit  or  32-bit.  This  decision 
should  be  driven  by  two  factors:  what  is 
possible,  given  your  development  envi¬ 
ronment;  and  what  platform  you  need  to 
deploy  on.  If  you  have  to  deploy  on  Win¬ 
dows  3. 1 ,  as  we  do,  then  you  have  to  build 
a  16-bit  application.  Note  that  16-bit 
applications  run  quite  well  on  Windows 
95  and  NT. 

•  If  you  build  both  a  1 6-bit  and  a  32-bit  ver¬ 
sion  of  your  application,  prepare  for 
installation  nightmares.  I  wouldn’t  rec¬ 
ommend  this  unless  your  application  is  a 
purely  client-side  tool. 

•  Call  Oracle  technical  support  and 
describe  what  you  want  to  do.  Really. 
That’s  what  we  did,  and  we  were  pointed 
to  all  the  right  places,  including  specific 
Web  pages  and  a  faxback  sendee. 

•  Once  you’ve  got  your  basic  components 
selected,  create  a  matrix  of  what  will  defi¬ 
nitely  work  together,  as  promised  by  Ora¬ 
cle,  and  what  could  work  together  on  a 
good  day.  This  way  you  can  tell  your  end 
users,  “These  configurations  work,  these 
other  configurationsjust  might  work,  and 
anything  else  is  your  own  personal  science 
project.” 

Myers  is  CEO  of  Client/Server  Connection, 
Ltd.,  a  Neiu  York-based  software  development 
company.  He  can  be  reached  via  the  Internet  at 
mmyers@cscl.  com. 
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Directed  by  Mark  Miller 


As  a  network  professional  you  must  now  integrate  local  and  wide-area  networks 
with  new  technologies  Including  Fast  Ethernet,  ATM,  frame  relay  and  SMDS. 
These  and  other  new  technologies  will  give  you  more  efficient  and  ever-faster 
communications  across  enterprise  networks. 

Taught  by  Mark  Miller  or  Dr.  Carl  Shinn,  both  leading  consultants  and  Internet¬ 
working  experts,  this  seminar  will  teach  you  how  to  design,  implement,  analyze 


and  manage  multiprotocol,  multi-operating  system  internetworks  that  seamlessly 
integrate  both  legacy  and  emerging  technologies. 

Throughout  this  class,  we  will  make  extensive  use  of  network  modeling,  simula¬ 
tion  and  analysis  tools  to  demonstrate  the  techniques  that  are  presented  in  this 
seminar. 


This  information-packed  three-day  seminar  will  help  you  .  . 


Evaluate  internetworking  hardware  and  software  solutions  for  optimum  network  design  and 
performance,  and  review  over  40  available  products 

Analyze  repeaters,  bridges,  switches,  routers  and  gateways  to  determine  which  one  is  appro¬ 
priate  for  particular  applications 

Prepare  for  the  next  generation  of  internetworking  challenges:  Frame  relay/SMDS,  frame 
relay/ATM  and  SMDS/ATM  connections 

Understand  the  foundation  internetworking  protocols:  TCP/IP,  IPX/SPX,  X.25  and  XNS 

Determine  bandwidth  requirements  for  both  leased  line  and  broadband  circuits 
utilizing  traffic  studies 

Troubleshoot  your  environment  through  case  studies  that  detail  protocol  operation,  and  illus¬ 
trate  typical  internetworking  problems  and  solutions,  including:  Ethernet  fragments,  the  token 
ring  route  discovery  process,  and  FDDI  station  management 

See  demonstrations  of  protocol  analysis  techniques  for  AppleTalk,  Banyan  VINES,  NetWare 
and  token  ring/SNA  environments,  with  case  studies  taken  from  live  internetworks 

Understand  the  key  internetworking  features  of  AppleTalk,  Banyan  VINES,  NetWare,  OS/2  LAN 
Server  and  Windows  NT 

Discover  some  key  applications  for  narrowband  ISDN  technology 


1  997  LOCATIONS 

AND  DATES 

San  Jose,  CA 

February  25-27 

Chicago,  IL 

April  8-10 

Dallas,  TX 

April  23-25 

New  York,  NY 

May  20-22 

■  Compare  the  technologies  and  operation  of  ISDN,  frame  relay  and  SMDS,  and  ATM,  and  dis¬ 
cover  the  role  of  the  broadband  implementers:  the  North  American  ISDN  Users'  Forum,  the 
Frame  Relay  Forum,  the  ATM  Forum  and  the  SMDS  Interest  Group 

■  Understand  the  detailed  operation  of  Ethernet,  IEEE  802.3,  token  ring  and  FDDI,  and  key  per¬ 
formance  characteristics  of  these  technologies 

1  Evaluate  the  differences  between  Transparent  Bridging,  Source  Routing  and  Source  Routing 
Transparent  Bridging  internetworking  standards 

■  Utilize  available  software  tools  for  the  network  optimization  and  modeling  process  — 
testing  your  configuration  before  installation 

Examine  application  gateways  that  connect  LANs,  minicomputers  and  legacy  systems 

’  See  how  SNMP  plays  a  key  role  in  internetwork  management  including  the  management  and 
operation  of  broadband  networks 

’  Understand  the  operation  of  IP-based  routing,  and  the  benefits  of  the  next  generation:  IPv6 

■  Match  the  appropriate  LAN  application  with  the  WAN  broadband  technology 

■  Understand  TCP/IP  and  the  Internet  protocol  suite,  including  ARP,  ICMP,  UDP,  SMTP,  TELNET 
and  FTP 

■  Explore  the  internetworking  challenges  of  remote  access  and  wireless  communications 


REGISTER  AND  YOU  WILL  RECEIVE 


■  Comprehensive  seminar  workbook 

'  Copy  of  best-selling  Internetworking,  2nd  edition,  by  Mark  A.  Miller 

>  Four  exclusive  protocol  reference  guides:  Ethernet,  Token  Ring,  FDDI  and  LAN  Cabling 

■  Valuable  course  diskette  containing  reference  information  on  internetworking  implementation, 
documentation  and  standards 

>  Luncheon  and  break  refreshments  included  each  day 

>  All  of  the  above  included  in  your  SI  1 95  registration  fee 


Note:  If  you  can't  attend,  a  Full  attendee  materials  kit 
for  the  Internetwork  seminar  is  available  for  just  $129,001 


Dial  Our  1 ■Til  H  ct  Information  Line  at 

1  -800-756-9430 

for  a  complete  seminar 
outline  and  registration  form. 

When  prompted,  request  document  #80. 


can  1-800-643-4668 

Register  today  for 
the  seminar  nearest  you! 


Web/E-Mail 


Information 


Obtain  full  seminar  information  and  register  on-line  in  the 
Professional  Development  section  on  our  Web  site  at: 

www.nwfusion.com 

OR 

receive  full  seminar  information  via  e-mail  by  sending  a  request  to: 

seminars@nww.com 

Please  put  the  word  "LAN"  in  the  subject  field. 
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Briefs 


MNextmonth,  Maxum  Devel¬ 
opment  Corp.  expects  to  ship 
Phantom  2.0,  a  $395  Macintosh- 
based  Web  crawler  and  search 


engine  that  lets  Webmasters  build 

targeted  search  and  re¬ 
trieval  capabilities  into  their 
sites. 

Maxum:  (630)  830-1113. 

■  Every  Ware  Development 
Corp.  today  started  shipping  the 
Macintosh  version  of  FileMaker 
2.1,  a  $349  visual  drag-and-drop 
development  environment  for 
creating  Web-based  applications 
that  connect  to  back-end 
databases. 

The  upgrade  includes  new 
features  such  as  support for 
Quarterdeck  Corp.  ’s  WebStar  API 
as  an  alternative  to  the  standard 
Common  Gateway  Interface. 

A  Windows  version  of  the 
product  is  expected  in  early 
spring. 

Every  Ware:  (888)819-2500. 

■  Atlanta-based  electronic  data 
interchange  software  and  service 
vendor  Harbinger  Corp.  has 
purchased  Ann  Arbor,  Mich.- 
based  EDI  Supply  Tech,  Inc.  in 

a  deal  valued  at  approximately 
$44  million.  SupplyTech 
will  operate  as  a  division  of 
Harbinger. 

Mina  survey  of 600  technical 
professionals  in  business  organi¬ 
zations,  Boston-based  research 
firm  Delphi  Consulting 
Group  found  that  37%  of  the 
organizations  now  have  more 
than  75%  of  their  desktops  con¬ 
nected  to  a  corporate  IP-based 
intranet.  In  three  years,  that 
number  is  expected  to  grow 
to  82%. 


Covering:  Internet  Technologies  and  Services 
for  Collaboration  and  Electronic  Commerce 


SmartTran  moves  mainframe  applications  to  the  Web 


By  Carol  Sliwa 

San  Jose,  Calif. 

Mainframe  applications  can 
be  a  pain  to  navigate.  For 
instance,  if  you  want  to  hop  from 
the  first  screen  to  the  14th  and 
then  the  20th,  you  often  have  to 
go  through  each  page  in 
sequence  —  not  exactly 
the  most  efficient 
approach. 

But  with  Enterprise- 
Link  Technology  Corp.’s 
new  SmartTran  software, 
developers  can  reengi¬ 
neer  mainframe  applica¬ 
tions  into  Web  ap¬ 
plications  without  tam¬ 
pering  with  the  legacy 
code.  Instead  of  going 
screen  to  screen,  the  user 
can  hop  around  just  by 
clicking  the  appropriate 
link. 

Unlike  some  other 
tools,  the  mainframe 
data  is  not  simply  redis¬ 
played  in  a  Web  browser. 

Rather,  the  “ugly,  horri¬ 
ble  mainframe  screen,” 
as  one  company  official 


put  it,  is  transformed  into  a 
neatly  designed  Web  page  that 
users  can  access  through  any 
standard  browser. 

“What  EnterpriseLink  brings 
to  the  table  that  sets  it  apart  from 
its  competition  is  the  ease-of- 
design  approach  for  creating 


new  interfaces  to  the  main¬ 
frame,”  said  Cindy  Borovick, 
manager  of  computer  network¬ 
ing  architectures  at  Framing¬ 
ham,  Mass.-based  International 
Data  Corp. 

With  SmartTran,  mainframe 
applications  are  turned  into 
objects  that  can  be  reassembled 
into  Web  pages.  Several  main¬ 
frame  screens,  or  merely  the 
fields  within  them,  can  be 
mapped  onto  a  single  Web  page. 

The  SmartTran  product  suite 
includes  three  pieces: 

•  A  Loader  that  lets  developers 
review  host  screens  and  create 
components  from  them. 

•  A  Builder  that  lets  developers 
drag  and  drop  the  objects  for 
reassembly  in  a  Web  page.  Smart- 
Link  components  are  mapped  to 
templates  that  become  the  foun¬ 
dation  of  a  new  Web  application. 
The  templates  can  be  manipu¬ 
lated  with  Web  authoring  tool 
products.  The  objects  can  be 
linked  with  databases  or  inte¬ 
grated  with  Java,  ActiveX  or 
Visual  Basic  components. 

•  Run-time  server  software  that 


MAINFRAME  DATA  GETS  WEB  FACE 


■  Host  screens  from  the  mainframe 


application  can  be  dragged  and 
dropped  onto  a  Web  page  template, 
where  a  developer  can  use  Web 
authoring  tools  to  create  a  Web- 
-  enabled  application. 

Each  mainframe  data  element 
becomes  an  object  the  developer  can 
control  and,  if  desired,  link  with  Java, 
ActiveX  or  Visual  Basic  scripts. 


See  how  other  vendors 
want  to  link  Web 
browsers  to  ••....•*<2 
mainframe  data,  n 

Enter  the 
number  to  the 
right  in  the 
DocFinder  box 
on  the  home 


transforms  a  Windows  NT  server 
into  a  Web-to-mainframe  front- 
end  processor  so  no  burden  is 
placed  on  the  mainframe. 

None  of  the  software  pieces 
run  on  the  mainframe  or  the 
client.  Instead,  the  processing  is 
done  on  a  middle-tier  server. 

“This  gives  the  user  a  three- 
tier  client/server  model,”  said 
J.C.  Dorng,  EnterpriseLink’s 
president  and  chief  executive 
officer. 

SmartTran,  available  now,  is 
priced  at  $125  per  user  in 
volume. 

©EnterpriseLink:  (408)  369- 
2270. 


Banking  software  rivals  agree  on  spec 


By  Ellen  Messmer 

CheckFree  Corp.,  Intuit,  Inc. 
and  Microsoft  Corp.  want  to 
make  online  banking  easier.  As 
part  of  that  effort,  the  three 
recently  released  a  draft  specifi¬ 
cation  called  the  Open  Financial 
Exchange  (OFX)  aimed  at  Web- 
based  online  banking  and  bro¬ 
kerage  services  software. 


“We  wantto  have  a final  version  of  the 
OFX  spec  out  in  mid-February,  ”  says 
CheckFree’sMark Johnson. 


Proprietary  software  such  as 
the  current  versions  of  Intuit’s 
Quicken  and  Microsoft’s  Money 
place  a  burden  on  banks,  which 
must  support  multiple  formats 
online  and  in  their  back-end 


systems,  executives  from  the 
three  companies  recently  said. 

“It  would  have  been  foolish 
not  to  listen  to  the  feedback  we 
were  getting,”  said  Lewis  Levin, 
vice  president  of  Microsoft’s 
desktop  financial  division. 

The  OFX  specification  would 
let  vendors  build  client/server 
software  products  for  exchang¬ 
ing  investment  and  account  data 
using  HTML  with  either  Java  or 
ActiveX.  Data  would  be  en¬ 
crypted  using  Netscape  Commu¬ 
nications  Corp.’s  Secure  Sockets 
Layer  or  Microsoft’s  Private 
Communications  Technology. 

The  next  versions  of  Quicken 
and  Money,  due  out  in  the  fall, 
are  expected  to  be  based  on  the 
OFX  specification. 

Sources  also  hinted  that  in  the 
near  future  Microsoft  will  be 
fielding  OFX-based  servers  for 
the  financial  community  to  com¬ 
pete  with  the  Web-based  server 
IBM  custom-made  for  invest¬ 
ment  firm  Charles  Schwab  & 
Company,  Inc. 


Mark  Johnson,  director  of 
business  services  at  CheckFree, 
said  OFX  will  also  provide  back¬ 
ward  compatibility  to  software 
now  on  the  market.  But  plenty  of 
compatibility  issues  still  remain. 

A  dozen  banks,  including 
Banc  One  and  Bank  of  America, 


are  well  along  in  working  with 
IBM  to  build  a  shared  network 
dubbed  Integrion,  based  on  an 
IBM  spec  called  the  Gold  Mes¬ 
saging  Standard.  Work  is  under 
way  for  a  common  translation 
method  between  the  two  specifi¬ 
cations.  ■ 
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DELIVERING  BUSINESS  REPORTS  TO  CORPORATE  INTRANETS. 

Dazel  Corp.  of  Austin,  Texas,  has  shipped  a  prerelease  version  of  MetaWeb,  a  server 
software  plug-in  for  its  Output  Server  that  will  enable  companies  to  deliver  reports 
created  with  business  applications  to  Web  browsers.  MetaWeb  also  can  push  those 
documents  to  any  employees  that  subscribe  to  receive  them.  The  requested 
information  is  delivered  to  intranet  users  through  an  InfoBox. 

Output  Server  2.5,  which 
shipped  last  September, 
costs  $45,000  for  100 
users.  As  a  software  add¬ 
on,  MetaWeb  will  be  priced 
at  $100  peruser.  Volume 
discounts  are  available. 

The  Unix  version  of 
MetaWeb  is  expected  to 
ship  in  April,  with  the 
Windows  NT  edition  to 
follow  in  June. 
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Dazel:  (800)  357-8357. 
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NET  INSIDER 

But  will  they  pay  attention  this  time? 


have  been  told  the  Eskimos  have  a 
hundred  or  more  words  for  snow, 
each  denoting  some  slightly  different 
type,  most  of  which  would  be  indistin¬ 


guishable  to  an  observer  who  did  not  have 
to  deal  with  snow  quite  as  intimately  as  the 
Eskimos  do. 

We  may  need  to  start  coming  up  with 


additional,  more  specific  alternatives  to 
the  word  “clueless”  in  the  networking 
world.  We  could  even  invent  a  few  general 
categories. 

There  are  the  passively  clueless  — 
those  who  don’t  take  the  time  to  find  out 
what  is  going  on  but  speak  or  act  anyway. 
There  are  the  benignly  clueless  —  those 
who  don’t  have  a  clue,  but  it  doesn’t  mat- 
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4:05-4:50 


50 


Keynote  Address 

Dr.  Robert  M.  Metcalfe,  Vice  President  of  Technology,  IDG 

Coctail  Reception 


8:45-1 1 :50  MORNING  SESSIONS 


*  Introduction 


Capturing  the  Top  10  IT  Growth  Opportunities 

Frank  Gens,  Senior  Vice  President,  Research 

Will  the  Telcos  Own  the  Internet?  IT  Opportunities  and  Impact 

Gigi  Wang,  Senior  Vice  President,  Communications  Industry  Research 

Outlook  for  New  Internet  Technologies 

John  Gantz,  Senior  Vice  President,  Personal  Systems  and  Services  Research 

Software  Economics  Beyond  Microsoft:  What  Works? 

Tony  Picardi,  Group  Vice  President,  Software  Research 


Session  A 
1:1S  -  8:00 


Internet  Technologies: 
Opportunities  ft  Challenges 
Ted  Julien 


Session  B 
8:15  -  3:00 


Session  C 
3:15  -  4:00 


TRACK  1 :  Internet  Hot  Spots 


Java's  Bace  to  Overtake  HTML 
Evan  Quinn 


New  Media:  Is  tt  Beady  for  Prime  lime? 

Bill  Ablondl 


TRACK  Z:  PCs  for  the  Next  Millennium 


Plugging  in  the  Toaster  IDC's  Outlook  on  the 
Information  Appliance  Marketplace 

Bruce  Stephen 


The  Vibrant  World  of  the  PC 

Eric  Lewis 


Semiconductor  OpportuniUea: 
System  on  a  Chip  Solutions 

Mario  Morales 


TRACK  3:  Winning  Software  Strategies 


The  ApplicationCentared  Data  Warehouse  Emerges: 
What  Partners  and  Channels  Should  Ton  Pursue? 


Internet  Applications.. .Is  Olient/Server  Dead? 

Clare  Gillan,  Michael  Sulvan-Trainor 


Bill's  New  Toy: 

Can  Microsoft  Cut  It  in  Content? 

David  Card 


TRACK  4:  NT  in  the  Enterprise 


NT  Adoption  —  Hew  Past  WSl  It  Happen? 

David  P.  Vellante 


NT  Servers  and  Clients: 
Building  Winning  Strategies 

Jay  Bretzmann 


NT:  Unix  Killer  or  New  Market  Growth? 

Dan  Kusnetzky 


TRACK  5:  LAN/WAN  Dynamics 


Next-Genentloa  LANs:  Treasure-end  Target! 

Mark  Leary 


The  Battle  for  the  Home:  Global  Prospects  tor 
New  Media  Products  and  Services 

Richard  Zwetchkenbaum 


Extending  the  Enterprise:  Remote  Access,  * 

Wide  Area  Bandwidth,  and  More 

Lee  W.  Doyle 

The  Year  2000:  Tools  and  Services  Industry  Gold  * 
Rush  and  the  Realities  of  End-User  Projects  * 

TomOiffim  • 


Network  Management: 
Adding  Value  to  the  Package 

Rick  Villars 


Japan  and  Asia/Pacific  Market  Outlook 

Philippe  deMarcillac 


One  thing  is  certain  in  this 
constantly  changing,  dynamic 
world  of  information  technology. 
You’d  better  be  well  informed  if 
you  expect  to  remain  competitive. 


For  32  years,  the  leading  executives 
in  the  information  technology  indus¬ 
try  have  built  on  their  success  by 
attending  IDC’s  Computer  Industry 
Briefing  Session.  Spend  just  one  day 
with  top  analysts  from  International 
Data  Corporation  and  gain  unique 
insight  into  the  future  of  IT.  Obtain 
an  objective  viewpoint  of  the  industry 
today  and  what’s  ahead  for  tomorrow 
as  we  probe  the  issues  and  trends 
impacting  emerging  technologies. 


To  register  and  for 
more  information,  call 


1-800-3434952 


March  11, 1997 
Boston,  MA 

Hynes  Convention  Center 


March  19, 1997 
San  Francisco,  CA 
San  Francisco  Marriott 


Co-sponsored  by: 


PC  WORLD 


COMPUTERWOMD 

NetworkWortd 


IDC 


International  Data  Corporation 
5  Speen  Street,  Framingham,  MA  01701 


IN 
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ter  because  they  don’t  do  anything  any¬ 
way.  There  are  the  aggressively  clueless  — 
those  who  proudly,  repeatedly  demon¬ 
strate  their  unwillingness  to  get  informa-  I 
tion  before  pontificadng.  There  are  the 
pathologically  clueless  —  those  who  do 
not  want  to  understand  because  demean¬ 
ing  others  is  the  aim  of  their  game.  There 
are  the  astronomically  clueless  —  those 
who  are  very  far  away  from  reality,  at  least 
as  far  away  as  Pluto.  Finally,  there  are  the 
mythologically  clueless  —  those  who  are 
not  of  this  universe. 

From  this  etymological  exploration, 
you  might  think  I’ve  been  reading  some 
Internet  mailing  list ,  such  as  the  one  dis-  i 
cussing  the  top-level  domain  names  issue. 
But  it  was  an  article  in  Fortune  about  com¬ 
puter  security  that  led  me  to  engage  in  this 
frustration-lessening  exercise. 

The  article  is  misdtled  “Who’s  reading 
your  E-mail?”  and  is  mostly  about  com¬ 
puter  security  or,  more  accurately,  the 
lack  of  computer  security.  But  the  security 
problems  that 
the  article  ex¬ 
plores  mostly 
are  not  ones  of 
technology  fail¬ 
ures,  but  instead 
are  failures  of 
the  thought  pro¬ 
cess.  The  article 
includes  a  side- 
bar  that  de¬ 
scribes  a  successful  tiger  team  attack  (with 
permission)  on  the  computers  and  net  of 
a  unnamed  major  company.  The  com¬ 
pany  had  quite  a  good  firewall  on  its  ’Net  < 
connection  that  thwarted  attackers  when 
they  attempted  to  enter  by  the  front  door. 

But  as  I  worried  in  a  previous  column 
(AW,  Sept.  26,  1996,  page  32),  the  com¬ 
pany  had  rather  poor  procedures  and  a  | 
poor  level  of  user  understanding  about 
security  behind  the  wall.  In  this  case,  the 
tiger  team  was  able  to  break  in  by  finding  a 
modem-accessible  PC  running  pcAny- 
where  that  was  not  password-protected. 
Once  the  hackers  had  access  to  that  PC, 
they  used  it  as  a  staging  area  to  poke  at  the 
rest  of  the  company’s  computers.  They 
were  able  to  gain  access  to  one  of  the 
development  workstations  by  using  an 
account  with  the  user  name  “guest”  and 
no  password.  The  article  also  reported 
there  is  a  42%  success  rate  in  password 
guessing. 

It  is  very  frustrating  to  hear  yet  again 
that  large  corporations,  which  should 
know  better,  are  continuing  to  refine  the 
meaning  of  clueless  when  it  comes  to  user 
passwords.  It  is  also  frustrating  to  have  the 
Internet  take  the  blame  for  corporations 
where  the  management  is  mythologically 
clueless  when  it  comes  to  the  most  basic 
part  of  security:  user  passwords. 

Disclaimer:  Sure,  there  are  clueless 
people  at  Harvard,  but  we  don’t  make  it 
an  art  form.  However,  tire  above  is  my  own 
etymology  exercise. 

Bradner  is  a  consultant  with  Harvard  ; 
University ’s  Office  of  Information  Technology,  ji 
He  can  be  reached  via  the  Internet  at 
sob@haruard.  edu. 
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When  we  tell  you  that  our  data/voice  networking  solutions  give  your 
enterprise  the  most  cost-effective  way  to  handle  data,  fax  and  voice 
communication  between  network  locations,  believe  it. 

Whether  you  use  leased  lines  or  frame  relay;  whether  you  need  a 
complete  network  or  just  want  to  add  voice/  fax  capability  to  your  cur¬ 
rent  network,  we  have  the  answer. 

When  we  analyze  your  needs  and  show  you 
how  dramatically  you  can  cut  communi¬ 
cation  costs,  you  can  believe  that  too! 


ClearVowe" 

Quality  You  Can  Hear 


And  when  we  tell  you  our  ClearVoice  networking  products  have 
superior  sound  quality,  you  don’t  have  to  take  our  word  for  it.  Listen 
for  yourself! 

MICOM  is  a  Northern  Telecom  (NORTEL)  company,  and  is  the  world¬ 
wide  leader  in  data,  voice,  fax  and  LAN  NfrRTEL 

network  integration. 

NORTHERN  TELECOM 

Call  us  and  ask  for  a  demonstration  of 

voice  over  frame  relay.  Ask  about  getting  a  free  network  cost  savings 

estimate  while  you’re  at  it. 

(800)  642-6687  Extension  1038 


m/rnm 

TAe  Voice  ofNefworAf/ig 


www.micom.com 


PENTIUM.PRO 

PROCESSOR 
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INTRODUCING  THE  DELL  POWEREDGE  4100  —  REDEFINING  THE  MID-RANGE  SERVER. 


The  way  we  build  servers,  reliability  isn't  an  option,  it's  a  mandate.  Which  is 
why  on  the  new  PowerEdge  4100  there  are  a  host  of  high-end  safety  features 
that  come  standard.  Like  3  fans  and  2  power  supplies.  ECC  to  catch  and  correct 
1-bit  errors,  and  RAID  that  stores  data  on  multiple  disks.  The  ability  to  hot  swap 
hard  drives  without  shutting  down  the  machine  and  without  interrupting  your 


network.  Even  a  feature  called  Remote  Assistant  that  operates  independently 
of  the  system,  dialing  out  to  notify  you  in  the  event  of  a  failure  and  letting  you 
dial  back  in  to  address  the  problem.  Something  you'd  normally  have  to  pay  extra 
for.  So  protect  your  network  with  a  Dell  server.  And  protect  yourself  from  the 
price  gouging  of  the  server  status  quo. 


MID-RANGE  SERVERS 


DELL*  POWEREDGE®  4100  SERVER 

200MHz  PENTIUM®  PRO  PROCESSOR 
(Dual  Processor  Capable) 

•  128MB  Error  Correcting  Code  (ECC) 

EDO  Memory  (1GB  Max.) 

•  512KB  Integrated  12  Cache 

•  2  Integrated  SCSI-3  Controllers: 

1  Ultra/Wide  SCSI  for  HDD's; 

1  Ultra/Narrow  SCSI  for  CD-ROM 

•  4GB  Fast/Wide  SCSI-2  Hard  Orive 
(54GB  Max.  Internal) 

•  8X  SCSI  CD-ROM  Drive 

•  Intel*  EtherExpress  Pro/100  PCI  NIC 

•  Intel  LANDesk™  Server  Manager  v2.5x 

•  8  Expansion  Slots:  5  PCI,  3  EISA 

•  10  Drive  Bays:  6  Internal  3.57 
4  External  5.25“ 

•  3  Year  Limited  Warranty1  with  1  Year 
NBD  On-site4  Service 

•  7x24  Dedicated  Server  Hardware 
Technical  Support 

•  Add  Microsoft *  NT  Server  4.0  for  $799. 


$6949 

Business  Lease*:  $250/Mo. 
Order  Code:  #200160 


DELL  POWEREDGE  4100  SERVER 

180MHz  PENTIUM  PRO  PROCESSOR 
(Dual  Processor  Capable) 

•  64MB  Error  Correcting  Code  (ECC) 

EDO  Memory  (1GB  Max.) 

•  256KB  Integrated  L2  Cache 

•  2  Integrated  SCSI-3  Controllers: 

1  Uttra/Wide  SCSI  for  HDD's; 

1  Ultra/Narrow  SCSI  for  CD-ROM 

•  4GB  Fast/Wide  SCSI-2  Hard  Drive 
(54GB  Max.  Internal) 

•  8X  SCSI  CD-ROM  Drive 

•  Intel  EtherExpress  Pro/100  PCI  NIC 

•  Intel  LANDesk  Server  Manager  v2.5x 

•  8  Expansion  Slots:  5  PCI,  3  EISA 

•  10  Drive  Bays:  6  Internal  3.5“/ 

4  External  5.25” 

•  3  Year  Limited  Warranty  with  1  Year 
NBD  On-site  Service 

•  7x24  Dedicated  Server  Hardware 
Technical  Support 

•  Add  Microsoft  NT  Server  4.0  for  $799. 

$5499 

Business  Lease:  $198/Mo. 

Order  Code:  #200158 


ENTRY  LEVEL  SERVERS 

DELL  POWEREDGE  2100  SERVER 

DELL  POWEREDGE  2100  SERVER 

200MHz  PENTIUM  PRO  PROCESSOR 

200MHz  PENTIUM  PRO  PROCESSOR 

•  64MB  Error  Correcting  Code  (ECC) 

•  32MB  Error  Correcting  Code  (ECC) 

EDO  Memory  (256MB  Max.) 

EDO  Memory  (256MB  Max.) 

*  256KB  Integrated  L2  Cache 

•  256KB  Integrated  L2  Cache 

*  Integrated  PCI  Ultra/Wide  SCSI-3  Controller 

•  Integrated  PCI  Ultra/Wide  SCSI-3  Controller 

•  4GB  Fast/Wide  SCSI-2  Hard  Drive 

•  2GB  Fast/Wide  SCSI-2  Hard  Drive 

[7200RPM,  8ms)  (12GB  Max.) 

[7200RPM,  8ms)  (12GB  Max.) 

•  8X  SCSI  CD-ROM  Drive 

•  8X  SCSI  CD-ROM  Drive 

•  3Com*  3C595 10/100  PCI  Network  Adapter 

•  3Com  3C595  10/100  PCI  Network  Adapter 

•  Intel  LANDesk  Server  Manager  v2.5x 

•  Intel  LANDesk  Server  Manager  v2.5x 

•  6  Expansion  Slots:  3  PCI,  3  EISA 

•  6  Expansion  Slots:  3  PCI,  3  EISA 

•  6  Drive  Bays:  3  Internal  3.57 

•  6  Drive  Bays:  3  Internal  3.5“/ 

3  External  5.25" 

3  External  5.25“ 

•  3  Year  Limited  Warranty  with  1  Year 

•  3  Year  Limited  Warranty  with  1  Year 

NBD  On-site  Service 

NB0  On-site  Service 

•  7x24  Dedicated  Server  Hardware 

•  7x24  Dedicated  Server  Hardware 

Technical  Support 

Technical  Support 

★  Add  Microsoft  NT  Server  4.0  for  $799. 

★  Add  Microsoft  NT  Server  4.0  for  $799. 

$3799 

$3199 

Business  Lease:  $134/Mo. 

Business  Lease:  $1 18/Mo. 

Order  Code:  #200173 

Order  Code:  #200171 

MHLL 

888-693-3355 

http://www.dell.com 

Mon-Fri  7am-9pm  CT*Sat  10am-6pm  CT*Sun  12pm-5pm 
In  Canada:  call  800-767-2794 
In  Latin  America:  call  512-728-4685 
GSA  Contract  #GS-35F-4076D 
Keycode  #29037 


'Pricing  is  non-discountable.  'For  a  complete  copy  of  our  Guarantees  or  Limited  Warranties,  please  write  Dell  USA  L.P.,  One  Dell  Way,  Round  Rock,  TX  78664.  ^Business  Leasing  arranged  by  Leasing  Group.  Inc.  aThis  on-site  parts  and  labor  service  provided  by  Digital  Equipment 
Corporation  and  is  available  in  29  metropolitan  areas.  'Prices  and  specifications  valid  in  the  U.S.  only  and  subject  to  change  without  notice.  Intel,  the  Intel  Inside  Pentium  Pro  logo  and  Pentium  are  registered  trademarks  and  the  Intel  LANDesk  logo  and  LANDesk  are  trademarks  of 
Intel  Corporation.  MS,  Microsoft,  Windows  NT  and  Windows  are  registered  trademarks  of  Microsoft  Corporation.  3Com  is  a  registered  trademark  of  3Com  Corporation.  Trinitron  is  a  registered  trademark  of  Sony  Corporation.  ©1997  Dell  Computer  Corporation.  All  rights  reserved. 


Special  Focus 


SECURITY 


A  fresh  alternative  to  the  usual  firewalls 


SOCKS  5.0  shows  improvement  over  SOCKS  4.0  by  adding  encryption  authentication  and  support  for  data  streaming. 


By  E!!en  Messmer 

Say  the  word  “SOCKS,”  and 
you  probably  think  of  footwear 
or  the  Clintons’  cat.  But  if  you’re 
looking  for  a  way  to  control 
access  to  and  from  your  intranet 
or  LANs,  you  should  consider 
SOCKS  technology  as  an  alterna¬ 
tive  to  traditional  firewalls. 

Application-layer  firewalls 
work  by  letting  managers  control 
how  users  can  access  standard 
Internet  applications  such  as  tel¬ 
net,  E-mail  and  File  Transfer  Pro¬ 
tocol,  while  packet-layer  firewalls 


j 


block  all  communications  at  the 
packet  level  based  on  the  user’s 
IP  address. 

An  alternative  to  these  two 
types  of  firewalls  is  a  client/ 
server  access-control  method 
called  SOCKS.  Developed  by 
NEC  Corp.,  it  works  at  the  ses¬ 
sion  level  to  let  you  set  up  a  cir¬ 
cuit-level  gateway  between  a  user 
andahost  (see graphic). 

The  advantage  to  this  circuit- 
based  approach,  according  to 
SOCKS  proponents,  is  that  once 
the  client  software  is  on  the 
user’s  desktop,  you  can  control 
nonstandard  applications  such 
as  Windows  without  having  to 
check  IP  addresses.  This  is  valu¬ 
able  because  IP  addresses 
change  when  they  are  dynami¬ 
cally  allocated  or  shared  by  a 
group  of  users. 

“The  application  has  to  go 
through  the  SOCKS  server, 
where  I  have  to  authenticate 
myself  to  the  server  before  being 
allowed  to  execute  the  opera¬ 
tion,”  said  Evan  Kaplan,  presi¬ 
dent  and  chief  executive  officer 
of  Seattle-based  Aventail  Corp.,  a 
start-up  developing  a  line  of 
SOCKS  products. 

While  SOCKS  is  not  a  direct 
offspring  of  the  WinSock  API, 
WinSock  inventor  Martin  Hall, 
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Aventail’s  AutoSocks  is  “socksification  ’ 
software for  TCP/IP  Windows 
applications. 


chief  technology  officer  of  Star¬ 
dust  Technologies,  Inc.,  hap¬ 
pens  to  be  a  co-founder  of 
Aventail. 

SOCKS  5.0  recently  became 
an  Internet  Engineering  Task 
Force  (IETF)  standard,  so  the 
underlying  technology  is  in  the 
public  domain.  Aventail  has  an 
exclusive  agreement  with  NEC 
to  license  the  source  code  to 
other  vendors. 

Aventail  earlier  this  month 
shipped  the  first  SOCKS  5.0 
server,  Security  Manager,  with 
the  SOCKS  5.0  client,  AutoSocks 
for  Unix  and  Windows  NT,  3.1 
and  95.  Next  month,  Aventail 
plans  to  add  Netscape  Commu¬ 
nications  Corp.’s  Secure  Sockets 
Layer  encryption  method  to  the 
server  and  rename  it  in  the  pro¬ 
cess  VPN  Server. 

The  earlier  SOCKS  4.0  has 
been  used  in  Web  browsers  from 
both  Netscape  and  Microsoft 
Corp.  Netscape  has  a  SOCKS  4.0- 
based  proxy  server,  and  Lotus 
Development  Corp.  has  added 
SOCKS  4.0  to  its  InterNotes 
Domino  server. 

Some  firewall  vendors, 
including  Digital  Equipment 
Corp.,  IBM,  NEC  and  Sterling 
Software,  Inc.,  have  added 
SOCKS  4.0  server  functionality 
to  their  firewalls  as  an  optional 
access-control  method. 

However,  SOCKS  4.0  lacks  the 
authentication  and  encryption 
features  found  in  the  otherwise 
similar  5.0.  “SOCKS  4.0  had  no 
encryption,  so  the  Internet’s  bad 
boys  could  hijack  the  session,” 
said  Michael  Zboray,  vice  presi¬ 
dent  of  networking  technologies 
at  Stamford,  Conn.-based  con¬ 
sultancy  Gartner  Group,  Inc. 

SOCKS  5.0  has  appeal 
because  “if  you  came  up  with  a 
new  Internet  application  that 
wasn’t  standards-based,  you 
could  use  SOCKS  5.0,”  said 
Zboray,  noting  that  it  is  fairly  easy 
to  use  SOCKS  to  set  up  a  gateway 
for  custom-built,  proprietary 
applications. 

New  York-based  human 
resources  management  firm 
Towers  Perrin  is  in  the  process  of 
migrating  to  Windows  95  and 
giving  6,000  workers  access  to 
the  Internet.  The  company 
decided  to  go  with  SOCKS  4.0 


when  network  managers  there 
realized  that  the  company’s 
existing  IBM  Secure  Network 
Gateway  firewall  already  in¬ 
cluded  SOCKS  support. 

“Trying  to  base  use  of  the  fire¬ 
wall  on  IP  addresses  for  6,000 
people  would  be  diffi¬ 
cult,”  said  Curt 
Browne,  Towers  Per¬ 
rin’s  director  of  tech¬ 
nology  strategies.  “In 
the  course  of  adding  IP 
to  these  desktops,  we 
decided  we’d  use  the 
Dynamic  Host  Con¬ 
figuration  Protocol  so 
we  don’t  have  to  man¬ 
age  the  addresses  at 
each  workstation.” 

The  centrally  man¬ 
aged  DHCP  servers 
automatically  allocate 
an  IP  number  to  a  desktop,  so  the 
user’s  IP  address  is  constantly 
changing. 

Towers  Perrin  last  fall  offered 
broad  assistance  to  Aventail  as  a 
SOCKS  beta  user.  In  return,  it 
convinced  Aventail  to  add  some 

GETTING  “SOCKSIFIED” 


limited  authentication  to  its 
SOCKS  4.0  client  software. 

“Authentication  is  more 
important  to  us  than  encryp¬ 
tion,”  Browne  said. 

SOCKS  5.0,  though,  incorpo¬ 
rates  an  IETF  standard  called 
General  Security  Services,  which 
lets  security  managers  plug  in  a 
variety  of  user  authentication 
methods. 

These  range  from  the  simple 
password  to  more  advanced 
authentication  systems  such  as 


Kerberos;  RADIUS;  Northern 
Telecom,  Inc.’s  Entrust;  the 
European  standard  dubbed  Ses¬ 
ame,  developed  by  Bull  HN 
Information  Systems,  Inc.;  and 
GTE  Corp.’s  CyberTrust,  which 
coincidentally  became  available 
just  this  week. 

SOCKS  5.0  could 
also  provide  a  way  for 
corporations  to  give 
their  external  trading 
partners  or  salespeople 
on  the  road  access  to 
resources  on  their  intra¬ 
net,  Zboray  noted. 

By  the  end  of  the 
month,  Aventail  plans 
to  ship  a  5.0-based  pack¬ 
age,  PartnerVPN,  which 
lets  two  trading  partners 
set  up  parameters  for 
accessing  each  other’s 
networks. 

Even  though  Seattle-based 
Visio  Corp.  already  maintains  a 
firewall  at  its  site,  the  company  is 
exploring  how  it  might  use  Part¬ 
nerVPN  to  give  its  business  part¬ 
ners  access  to  Visio  databases. 


“The  fact  that  SOCKS  5.0 
doesn’t  care  about  what  it’s  run¬ 
ning  on  means  you  don’t  have  to 
set  up  completely  different  secu¬ 
rity  scenarios  with  each  of  our  cli¬ 
ents,”  said  Neal  Myrick,  Visio’s 
IS  manager. 

“The  thing  that  appeals  to  me 
is  that  it  is  a  circuit-level  proxy, 
and  it  seems  easy  to  implement 
in  comparison  with  a  lot  of  stan¬ 
dard  firewalls.  It’s  a  shame 
SOCKS  isn’t  more  widely  used,” 
he  said. 


Aventail  is  in  negotiations 
with  several  software  and  firewall 
vendors  to  get  SOCKS  5.0  into 
new  products. 

Some  vendors  say  it’s  time  to 
get  “SOCKSified.”  Helius 
Corp.,  an  Orem,  Utah-based 
start-up  founded  by  former 
Novell,  Inc.  employees,  has  cre¬ 
ated  a  SOCKS  5.0-based  IPX  and 
IP  gateway  for  controlling  Inter¬ 
net  access  to  and  from  a  NetWare 
LAN. 

The  Helius  software,  which 
can  run  on  an  existing  NetWare 
server,  provides  Internet  access 
via  simple  landlines  or  the  satel¬ 
lite-based  Internet  service, 
DirectPC,  offered  by  Hughes 
Network  Systems,  Inc. 

Helius  developed  the  soft¬ 
ware  by  porting  the  Unix-based 
IP  Exchange  product  from  Cisco 
Systems,  Inc.  to  NetWare,  which 
lets  as  many  as  32,000  internal 
users  share  one  IP  address. 

Helius  President  Myron  Mos- 
barger  said  it  costs  about  $2,000 
for  a  full  Helius  setup,  including 
a  satellite  dish,  to  get  started  with 
10  users. 

“With  SOCKS  5.0,  we  can 
control  what  the  user  views,  and 
this  is  attractive  to  schools  and 
businesses  that  don’t  want 
employees  going  all  over  the 
’Net,”  Mosbarger  said. 

Even  the  biggest  boosters  of 
SOCKS,  such  as  Aventail,  are  will¬ 
ing  to  concede  that  the  technol¬ 
ogy  simply  represents  one 
security  model,  not  some  magic 
fix  for  everything. 

Circuit-level  proxies  such  as 
SOCKS  hide  the  IP  address  struc¬ 
ture  of  the  network  to  communi¬ 
cate  with  the  proxy  server,  client 
machines  have  to  be  configured 
to  transmit  all  TCP/IP  data 
through  the  circuit-level  gate¬ 
way. 

And  while  circuit-level  proxy 
servers  offer  flexibility,  they 
lack  knowledge  of  the  underly¬ 
ing  application  protocol  so  they 
can’t  control  application-spe¬ 
cific  information  as  tighdy 
as  an  application-level  gateway. 

Within  every  organization, 
network  managers  have  to  weigh 
the  pros  and  cons  against 
the  environment  they  work  in  to 
find  out  if  they  really  need 
SOCKS.  ■ 


Aventail’s  Kaplan 
says  “SOCKS  5.0 
adds  authenti¬ 
cation  and  encryp¬ 
tion  for  all  UDP 
traffic.  ” 
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How  SOCKS  compares  to  other  firewall  technologies. 

The  seven-layer  0SI  model 

Application 
Presentation 
Session 
Network 

Transport 
Datalink 

Physical 


Application- 

layerfirewalls 

Circuit  proxies, 

including 

SOCKS 

Packet-filter 

firewalls 


SOCKS  technology  works  at  the  session  layer  to  authenticate  network  users, 
control  network  access  and  encrypt  traffic. 
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...in  this  high-stakes  environment,  who  really  stacks  up? 


Network  consolidation  demands  a  realistic  view  of  the  “big” 
picture.  One  that  ensures  existing  legacy  protocols  merge 
smoothly  over  frame  relay  with  LAN  and  voice  traffic,  without 
falling  short  of  accommodating  future  technological  advances. 

The  Answer?  Hypercom’s  IEN  multiservice  switch/routers— for 
total  branch  networking  and  optimized  network  performance. 

The  modular,  stackable  branch  solution.  IEN  integrates 
full  branch/backbone  functionality  onto  a  single,  stackable 
platform — supporting  SNA  and  other  legacy  protocols, 
performing  multiprotocol  routing,  and  featuring  integrated 
FRAD,  CSU/DSU,  data  and  voice  compression,  switching 


and  dial  back-up.  This  versatile  and  modular  solution 
lets  you  build  a  network  to  handle  new  applications 
and  increasing  bandwidth  requirements  with  a  flexible 
“pay  as  you  grow”  approach. 

Voice/data  leadership.  From  Data  Communications 
Voice  Over  Frame  Relay  Lab  Test*— “Besides  garnering  the 
highest  raw  score  in  audio  quality,  the  IEN  3000  and  5000 
offer  perhaps  the  richest  feature  set  of  all  products  tested...” 

IEN  represents  an  unequaled  blend  of  flexibility  and  sound 
investment.  Let  Hypercom  show  you  how  many  ways  it  stacks 
up  when  it  comes  to  helping  you  keep  your  competitive  edge. 


Visit  our  web  site  or  call  to  check  out  our  new  white  paper: 
Voice  Over  Frame  Relay:  A  New  Era  In  Branch  Consolidation. 

•Testing  conducted  by  National  Software  Testing  Laboratories,  September,  1996 


http://www.hypercom.com/netsys 
(800)  577-5501 
(602)  504-5000 


See  us  at  ComNet  '97  Booth  # 716 


Got  Frame  Relay  Management 

on  Your  Mind? 


I  need  proactive  tools  that  maximize 
network  availability. 


How  do  I  know  how  much 
bandwidth  I  need? 


I  want  to  leverage  my  enterprise 
management  platfonn. 


How  do  I  know  I'm  getting 
what  I  paid  for  from  my  carrier? 


How  can  I  manage  without 
Syric  Circuit  Management? 


Think  Sync. 


Managing  your  frame  relay 
network  can  be  mind-boggling. 
Sync’s  Frame  Relay  Access  Probe 
(FRAP)  and  graphical  enterprise 
management  applications  provide 
advanced  circuit  management  functions  that  let  you 
examine  the  vast  reaches  of  your  network.  You  will  gain 
insight  to  potential  problems  that  can  threaten  your  net¬ 
work’s  cost-effectiveness,  performance  and  availability. 

Peace  of  mind  comes  standard  with  innovative 
performance  management,  capacity  planning,  diagnostic 


and  reporting  features.  Detailed 
views  of  end-to-end  network 
connectivity,  bandwidth  utilization, 
network  and  application  level 
traffic — such  as  SNA,  TCP/IP, 
browser  and  file  transfers — and  web-based  reporting,  will 
always  keep  you  in  the  know. 

If  you  have  frame  relay  management  on  your  mind. 
Think  Sync.  Call  today  for  an  informative  white  paper  on 
circuit  management.  It  will  be  one  less  thing  to  think  about. 
(800)  828-2785  or  www.sync.com/therapy 


©  1997  Sync  Research,  Inc.  40  Parker,  Irvine,  CA  92618  (714)  S88-2070  or  (508)  285-0033.  All  specifications  and  features  are  subject  to  change  without  notice. 


NETWORK  HELP  DESK 


Ron  Nutter,  a  Master  Certified 
Novell  Engineer  and  Groupware 
CNEin  the  Lexington,  Ky.,  area, 
tracks  down  the  answers  to  your 
questions.  Call  (800)  622-1 108, 

Ext.  476,  or  send  your  questions  to 
mutter@world.  std.  com. 

I  have  an  IBM  Model  80  Micro  Chan¬ 
nel  file  server  with  14M  bytes  of 
RAM.  It  runs  NetWare  3.11  and  has 
two  Ethernet  cards. 

In  addition,  I  have  an  Adaptec,  Inc. 
1640  SCSI  board  Installed  but  can¬ 
not  get  the  driver  to  load  from  the 
server  console.  The  board  Is  Installed 
In  CMOS  setup,  and  Is  not  using  any 
Interruptor  I/O  In  conflict  with  other 
cards. 

Here's  the  load  statement:  LOAD 
C:\AHA1640.DSK  SL0T=5,  and  the 
error  Is:  “ERR  117:  Unable  to  Initial¬ 
ize  host  adapter's  mailbox  location, 
module  Initialization  failed,  module 
AHA1640.DSK  not  loaded."  Neither 
Adaptec  nor  Novell  have  been  able  to 
tell  me  what  “mailbox  location” 
means  or  provide  much  help. 

J.B.  Mercer,  systems  engineer, 
DataNet,  Inc. 

I  have  been  able  to  resolve  similar 
problems  with  the  help  of  additional 
information  that  appears  when 
you’re  in  the  server  configuration 
program’s  advanced  mode. 

So  get  the  latest  configuration 
program  from  IBM's  Web  site 
(www.ibm.com) .  When  you  call 
up  the  program,  press  CTRL-A  to 
get  to  the  advanced  part  of  the 
configuration. 

I've  found  that  SCSI  controllers 
for  IBM  Personal  System/2  models 
like  to  set  up  at  Interrupt  14  or  15, 
so  try  moving  the  controller  to  a 
different  interrupt.  You  also  may 
want  to  try  a  Mylex  Corp.  BusLogic 
controller.  I  have  been  able  to  get 
this  controller  to  work  when  I’ve 
had  problems  with  the  Adaptec 
controller. 

It  might  be  worth  a  trip  to  Adap¬ 
tec’s  Web  site  (www.adaptec.com)  to 
download  NW31X.EXE.  This  will  give 
you  the  latest  drivers  for  the  control¬ 
lers  and,  more  importantly,  the  latest 
ASPITRAN.DSK.  Itcan'thurtto  get 
the  latest  driver  release. 

You  also  should  try  moving  the 
SCSI  controllers  to  different  slots. 
This  will  help  determine  if  you  have  a 
motherboard  problem. 


Working  out  a  smooth  migration 
for  SNA-to-frame  relay  networks 


By  Lori  Dreher 

After  several  years  of  industry 
discussion  and  attempts  by  IBM 
to  convince  its  installed  base  to 
migrate  from  legacy  SNA  net¬ 
works  to  frame  relay,  it  appears 
many  companies  at  last  are  ready 
to  make  the  move. 

The  ability  to  successfully 
carry  SNA  traffic  over  a  frame 
relay  network  is  pardy  a  function 
of  network  design  (for  example, 
the  assignment  of  SNA  and  LAN 
traffic  to  separate  permanent  vir¬ 
tual  circuits  and  appropriate  siz¬ 
ing  of  ports  and  PVCs)  and  pardy 
a  funcdon  of  the  network  equip¬ 
ment  being  used. 

One  of  the  big  challenges  is 
network  response  time  —  a  criti¬ 
cal  but  rather  subjective  issue.  A 
perfectly  acceptable  response 
time  to  a  user  of  one  application 
may  be  completely  unacceptable 
to  a  user  of  a  different  applica¬ 
tion.  In  servicing  SNA  users  and 
applications,  the  network  will  be 
expected  to  provide  acceptable 
levels  of  service  across  the  board . 

In  a  frame  relay  network,  the 
response  time  experienced  by  a 
user  of  any  PVC  is  dictated  by  sev¬ 
eral  factors: 

•  Equipment  transit  delays 
within  the  customer  premises 
equipment  (CPE)  and  in  each 
switch.  These  delays  are  predict¬ 
able,  but  will  vary  according  to 
the  load  on  the  net  and  within 
the  switch.  They  also  can  be 


influenced  by  PVC  prioritization 
schemes  implemented  within 
the  switch,  where  frames  on  cer¬ 
tain  PVCs  are  given  preferential 
treatmentduring  processing. 

•  The  number  of  hops  between 
the  two  communicating  SNA 
end  systems.  Assuming  direct 
connection  to  the  network  at  the 
host  and  CPE  sites,  the  hop 
count  reflects  the  number  of 
trunks  the  PVC  must  traverse 
within  the  network. 

•  Application-related  issues. 
Higher  layer  protocol  events  at 
the  CPE  or  host  site  may  change 
the  response  time  experienced 
by  the  user.  Additionally,  heavy 
processor  loading,  especially  at 
the  host,  may  lengthen  the 
response  time.  In  these  cases, 
improved  response  times  are 
probably  beyond  the  control  of 
the  network. 

•  Media  transmission  delays. 
These  are  a  function  of  the  physi¬ 
cal  bandwidth  terminated  at 
each  hop  through  the  network. 

A  variety  of  industry-standard 
or  value-added  features  and 
capabilities  can  be  used  to  design 
networks  that  deliver  response 
times  and  service  levels  aimed  at 
converged  SNA  and  multiproto¬ 
col  nets.  For  example,  fault-toler¬ 
ant  networking  can  be  provided 
in  some  cases  via  the  switched 
network’s  internal  routing  algo¬ 
rithm,  which  may  support  fast 
error  detection  and  dynamic 


rerouting  of  PVCs  quickly 
enough  that  the  user  session  is 
not  disrupted.  The  routing  algo¬ 
rithm,  combined  with  a  hard¬ 
ware  redundancy  scheme,  will 
ensure  the  requirements  of  reli¬ 
ability  and  availability  are  met. 

In  addition,  each  PVC  can  be 
assigned  a  priority  to  ensure  that 
latency-sensitive  traffic,  such  as 
that  in  SNA  terminal  sessions,  is 
identified  as  it  enters  the  frame 
relay  network  and  is  given  prior¬ 
ity  over  all  other  traffic  across  the 
network. 

Design  metrics  that  let  net¬ 
work  managers  or  service  provid¬ 
ers  exercise  control  over  the 
specific  path  a  virtual  circuit  will 
take  through  the  network  also 
are  important  in  a  shared  net¬ 
work  environment.  For  exam¬ 
ple,  SNA  traffic  can  be  routed  to 
fast  and  high-quality  trunks  that 
are  not  shared  with  other  traffic. 

Use  of  45M  bit/sec  frame 
relay  also  is  often  warranted  in 
SNA  environments.  These  frame 
relay  links  provide  the  high¬ 
speed  access  to  a  data  center  or 
corporate  headquarters  that 
many  SNA  networks  need,  with¬ 
out  requiring  the  use  of  multiple 
physical  ports. 

Network  management 

A  number  of  features  are  also 
available  to  support  the  stringent 
network  management,  opera¬ 
tions  and  monitoring  required 


for  mission-critical  applications 
such  as  SNA.  Statistics  may  be 
gathered  and  used  to  provide 
specific,  measurable  informa¬ 
tion  about  quality  of  service 
(QoS). 

The  type  of  QoS  information 
gathered  may  include  configura¬ 
tion  data,  information  on  lost 
frames,  and  the  minimum,  maxi¬ 
mum  and  average  round-trip 
delay  through  the  network.  The 
particular  components  tracked 
may  include  circuits,  ports  and 
PVCs. 

SNA  users  probably  also  will 
find  the  Customer  Network  Man¬ 
agement  (CNM)  feature  defined 
by  the  Frame  Relay  Forum  help¬ 
ful.  CNM  lets  network  managers 
or  service  providers  give  users 
the  ability  to  access  information 
about  the  performance  and 
characteristics  of  their  networks. 

To  ensure  the  anticipated 
business  and  technical  benefits 
associated  with  the  migration  of 
SNA-to-frame  relay  networks, 
network  managers  and  public 
network  service  providers  must 
understand  and  take  steps  to 
address  the  specific  concerns 
and  challenges  associated  with 
supporting  mission-critical 
applications  typical  of  an  SNA 
environment. 

Dreher  is  product  marketing 
manager  at  Cascade  Communica¬ 
tions  Corp.,  a  frame  relay  switch  ven¬ 
dor  in  Westford,  Mass.  She  can  be 
reached  by  phone  at  (508)  952-1256 
or  via  E-mail  at  ldreher@casc.com. 
Portions  of  this  story  were  reprinted 
with  permission  from  the  Wescon 
conference  in  Anaheim,  Calif,  on 
October  22,  1996. 


HOW  IT  WORKS 

Boosting  SNA  over  frame  relay 


2 


A  multiprotocol  router  aggregates 
the  SNA  and  IPX  traffic,  and  moves 
the  SNA  data  onto  a  high-priority 
PVC  and  the  IPX  data  onto  a  low- 
priority  PVC. 


A  number  of  features, 
such  as  prioritization  of 
permanent  virtual 
circuits  (PVC),  fault- 
tolerant  switching  and 
high-speed  access  links, 
can  ensure  that  latency- 
sensitive  SNA  data  is 
effectively  carried  over 
a  frame  relay  network. 
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A  remote  user 
initiates  a  session 
with  an  SNA  host  at 
the  corporate  data 
center,  while  a  LAN 
user  running  IPX 
requests  a  file  from 
the  corporate  server. 
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A  frame  relay  switch  at  the  network 
entry  point  determines  how  to  route 
the  respective  traffic  across  the 
network.  The  SNA  data,  because  it  has 
been  assigned  a  high-priority  PVC,  gets 
a  more  direct  route  across  the  network 
than  the  IPX  data. 
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The  backbone  router 
sends  the  session  and 
file  requests  to  their 
respective  destinations, 
the  SNA  host  and  the 
corporate  server. 


Corporate 

server 


Remote  customer  premises 


Fault-tolerant  frame  relay  network 


Corporate  data  center 


Network  World  ‘January  27, 1997  •  www.nwfusion.com*  39 


EDITORIAL 


g h— £ 


Go  for  it  already! 


A  weekfrom  tomorrow,  AT&T  Chairman  and  CEO  RobertAllen 
will  take  the  podium  at  the  National  Press  Club  in  Washington, 
/  \  D.C.  His  topic:  Telecom  reform,  one  year  later. 

Allen  last  spoke  in  Washington  a  year  ago  —  the  day  Presi- 
JL.  JL  dent  Clinton  signed  the  telecom  reform  bill.  At  the  time, 
Allen  said  AT&T  would  enter  local  markets  in  all  50  states  as  early  as  the 
following  summer.  Today?  AT&T  offers  residential  local  service  on  a 
resale  basis  in  one  city:  Sacramento,  Calif.  AT&T  business  local 
exchange  service?  It’s  nowhere  to  be  found. 

Allen’s  speech  next  week  will  provide  a  good  barometer  ofwhether 
AT&T  will  be  able  to  improve  on  this  record.  Let’s  see  how  much  time 
Allen  spends  laying  out  AT&T’s  plans  to  take  control  ofits  destiny  by 
creating  its  own  local  facilities,  and  how  much  time  he  spends  castigat¬ 
ing  entrenched  local  carriers  for  fouling  up  telecom  reform.  Any 
guesses? 

Yes,  I  know.  GTE  and  the  regional  Bell  operating  companies  are  evil 
monopolies  bent  on  blocking  competitors.  And  the  courts  are  holding 
up  the  Federal  Communications  Commission’s  interconnection 
rules. 

But  no  one  —  not  the  RBOCs,  not  the  government — will  hand 
AT&T  the  local  exchange  on  a  silver  platter.  Yes,  the  law  gives  AT&T 
the  right  to  enter  the  local  market  via  resale.  But  how  much  this  bene¬ 


fits  corporate  users  is  highly  questionable.  Research  indicates  that  user 
interest  in  end-to-end  telephony  from  a  single  carrier  collapses  when 
some  of  the  links  are  provided  on  a  resale  basis — and  for  good  reason 
(see  story,  page  1). 

There’s  another  path.  After  years  of  talk,  MCI  is  finally  building  out 
its  local  facilities  to  the  point  where  RBOCs  are  sitting  up  and  taking 
notice.  As  Tim  Stevens,  director  of  advanced  access  services  for  Bell 
Atlantic,  recently  told  me:  “When  you  see  ‘MCI’  on  the  manhole  cov¬ 
ers, you  know  they’ve  arrived.” 

Real  local  competition  requires  an  investment.  MFS  Communica¬ 
tions  spent  millions  building  local  networks  without  turning  a  profit. 
But  now  that  it’s  been  bought  by  WorldCom,  Inc.,  it  has  a  chance  to 
beat  AT&T  to  the  end-to-end  punch.  MCI  will  spend  $700  million  this 
year  on  local  buildouts.  AT&T’s  dollar  commitment  to  its  local  busi¬ 
ness?  Well,  that’ s  a  mystery. 

AT&T’s  endless  legal  whining  despite  fatstate-approved  resale  dis¬ 
counts  is  a  convenient  mask  for  the  fact  that,  so  far,  it’s  been  unwilling 
to  take  any  risks.  That’s  as  big  a  reason  for  the  stalemate  in  telecom 
reform  as  anything  else.  Users  need  evidence  that  AT&T  is  willing  to  go 
for  it  in  the  local  loop.  If  it  waits  too  long,  other  options  may  appear 
more  enticing. 

David  Rohde,  senior  editor  drohde@nww.com 


The  Internet  •  Wayne  S  piv  ah 

Defending  spam,  plus  survival 
tips  for  a  spam-filled  world 

O  he  closing  moments  of  “Monty  Python’s  Flying  Circus”  bit 
on  Spam  find  us  listening  to  Vikings  singing  “Spam,  Spam, 
Spam,  Spam.  Lovely  Spam !  Wonderful  Spam !  ’  ’ 

I  agree.  Spam  is  not  inherently  a  bad  thing,  though  it’s  often  por¬ 
trayed  that  way  (Jan.  13,  page  1).  It  currently  suffers  from  two  major 
problems:  the  nonexistence  of  an  acceptable-use  policy  and  the  lack 
of  a  surefire  way  for  Internet  users  to  remove  themselves  from  mail- 
inglists. 

Before  you  fill  up  my  mailbox  with  angry  retorts,  let’s  look  at  this 
phenomenon  from  a  business  standpoint.  Die-hard,  true-blue  spam 
haters  define  spam  as  unsolicited  E-mail — period.  The  majority  of 
Internet  users  define  spam  as  unsolicited  E-mail  sent  to  a  large  num¬ 
ber  ofpeople,  orposted  messages  to  several  newsgroups  thatare 
unrelated  to  the  stated  purpose  of  said  newsgroups. 

Now,  if  I  were  a  lawyer  defending  my  client,  I  would  claim  that  all 
these  definitions  are  too  broad  to  be  accurate.  Unsolicited  E-mail 
could  be  considered,  in  the  broadest  sense,  E-mail  from  anyone  you 
did  not  expect  to  hear  from.  In  a  more  narrow  view,  spam  can  be  con¬ 
sidered  E-mail  from  companies  with  the  sole  mission  of  filling  up 
your  mailbox  with  junk  E-mail. 

As  a  businessperson,  I  need  to  market  my  wares  in  order  to  make 
money.  I  can  advertise  in  magazines  (or  on  Websites)  or  have  my  tele¬ 
marketer  call  you  (or  send  a  fax,  although  that  is  now  illegal  in  some 
states) .  I  can  also  utilize  the  time-honored  mass  mailing — eithervia 
the  U.S.  Postal  Service  or  the  Internet. 

What  do  you  do  with  all  thejunk  mail  you  receive?  I  throw  it  out. 
With  junk  E-mail,  I  hit  the  lovely  delete  key.  Presto,  no  more  spam  — 

I  mean,  unsolicited  E-mail. 

Those  with  neither  the  time  nor  the  inclination  to  hit  the  delete 
key  may  wonder  what  their  options  are.  A  good  place  to  start  is 
SPAMAD,  a  new  mailing  list  that  acts  as  a  forum  for  discussing  the 
problem  of  unsolicited  advertising  via  E-mail  and  on  Usenet,  as  well 
as  potential  solutions.  It  is  unmoderated,  but  it  manages  to  stay  on 
topic.  To  subscribe,  send  E-mail  to  listserv@internet.com,  and  in  the 
body,  type  “subscribe  SPAMAD.” 

One  of  the  more  realistic  suggestions  proposed  via  SPAMAD 
advises  spam  recipients  to  send  the  entire  post,  including  full  head¬ 
ers,  to  four  places:  the  poster’s  address,  the  poster’s  postmaster,  the 


National  Fraud  Information  Center  (http://www.fraud.org)  and  the 
Federal  Trade  Commission  (http://www.ftc.gov/index.htm) . 

Another  suggestion  involves  creating  an  accreditation  process  that 
rewards  Internet  service  providers  that  take  an  active  stance  against 
spam  mongers  by  allowing  such  ISPs  to  display  an  icon  on  their  home 
pages  similar  to  the  blue  ribbon  denoting  freedom  of  speech  online. 

Still  another  suggestion  advocates  E-mail  programs  thatallowfilter- 
ing.  One  example  is  the  ListWasher  by  Peter  Hartley  (http://www.har- 
tley.on.ca/).  Marketers  use  this  program  to  “wash  out”  domains  that 
don’t  want  solicitations,  as  well  as  addresses  registered  with  Hardey’s 
cancelbot.  With  ListWasher,  users  can  remove  themselves  from — or 
add  themselves  to  —  mailing  lists. 


Unfortunately,  sendingE-mail 
to  cancelbots  and  to  many  spam 
originators  doesn  ’  t  always  work. 
Many  spam  mongers  use  fictitious 
domain  names  or  don’tfollow 
RFC  specifications.  And  even  if 
you  do  succeed  in  sending  a 
“Don’t spam”  message,  it  may 
not  stop  the  spammer. .  .yet.  But 
in  time,  when  this  new  venue 
matures,  so  will  compliance  with 
acceptable  use. 

In  any  event,  while  unsolicited 
E-mail  can  be  exasperating,  time- 
consumingand,forsome,  expen¬ 
sive,  I’m  still  for  it.  This  country  is 
built  on  the  premise  of  free  enter¬ 
prise,  and  the  new  Internet  —  the 
commercial  Internet —  is  also 
built  on  that  premise.  So  let’s  call 
spam  free  enterprise,  set  up  equi¬ 
table  rules,  enforce  these  rules 
and  move  on  to  more  important 
topics  —  like  making  money. 


Spivak  is  president  and  owner  of 
SBA  *  Consulting,  an  IT  consulting 
firm,  and  SB  A.  NET  WEB,  an 
Internet  consulting  company.  He 
can  be  reached  via  the  Internet  at 
wspivak  @ sbanetweb .  com . 


Send  Utters  to  numews@nww.com  or John  Gallant, 
editor  in  chief  Network  World,  161  Worcester  Road, 
Framingham,  MA  01 701.  PUase  include  phone  num¬ 
ber  and  address  for  verification. 


Microsoft  should  talk 

Your  story  “Sun  reaffirmsjava  con¬ 
trol”  (Dec.  16, 1996,  page  1)  quotes  Brad 
Chase,  vice  president  for  marketing  at 
Microsoft  Corp.  ’s  Internet  client  and 
collaboration  division,  as  saying,  “Ifyou 
really  want  to  makejava  100%  pure  and 
have  it  be  an  open  language,  then  put  it 
into  a  standards  committee.” 

It’s  pretty  cheeky  of  anyone  from 
Microsoft  to  take  a  shot  at  another 
vendor  about  open  standards,  consider¬ 
ing  the  indifference  Microsoft  has  so 
often  shown  toward  both  openness  and 
standards. 

“Open”  has  a  singular  meaning  in  the 
Microsoft  glossary:  If  Microsoft  publisher; 
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Yankee  Ingenuity 


Howard  Anderson 


Turning  intranets  into  strategic  marketing  weapons 


eople  have  a  tendency  to  take  a  newdevelopment,  compare  it  to  an  older 


one  and  pronounce  them  equal.  Michael  Jordan?  A  Dr.  J  clone.  The 
network  computer?  A  brain-dead  IBM  3270.  Intranets?  No  big  deal  —  large 
companies  have  been  using  intraenterprise  networks  for  years. 

The  initial  cynicism  that  intranets  are  just  the  same  wine  in  a  new  bottle  has  to 
give  way  to  a  new  reality:  This  intranet  hoopla  is  notjust  a  scheme  for  getting  unwit¬ 
ting  companies  to  pay  more  for  the  same  functionality  they  have  been  using  for 
years.  Rather,  intranets  really  are  a  significantly  better  mousetrap. 

Why?  Mainly  because  in  the  future  we  will  combine  internal  databases  with  exter¬ 
nal  information  and  simulation  models  to  build  new  prod¬ 
ucts. 

Every  company  in  America  is  deathly  afraid  that  its 
mainstay  products  will  become  commodities  and  be 
undercut  by  competitors.  Every  company  hopes  that  the 
added  value  it  puts  into  its  products  gains  it  a  price  pre¬ 
mium. 

But  what  few  companies  realize  is  they  don’t  have  to 
invest  so  much  in  R&D.  By  leveraging  their  internal  data¬ 
bases  and  models  over  the  Internet,  andjudiciously  using 
intranets,  companies  can  accomplish  the  same  thing.  In 
short,  a  company  can  differentiate  itself  by  externalizing 
its  internal  system. 

A  couple  of  examples:  The  network  that  allows  you  to 
track  your  package  was  once  Federal  Express  Corp.’s  inter¬ 
nal  system;  the  solution  thatallows  architects  to  build  elevator  subsystems  was  once 
Otis  Elevator  Co.’s  internal  CAD  system. 

For  the  past  20  years,  every  middle-aged,  slightly  balding  seminar  speaker  — 
includingyours  truly — has  pontificated  that  the  internal  data  processing  strategy 
should  dovetail  with  the  corporate  strategy.  But  what  precious  few  of  us  understood 
was  those  internal  systems,  on  steroids,  would  become  the  systems  we  would  market. 
Today’s  intranet  usage  is  evolutionary,  and  all  we  are  really  doing  is  mimicking  the 
Internet,  mainly  publishing  documents  for  internal  information  dissemination.  It’s 
the  data  behind  the  data  that  has  value. 

Afewweeks  ago,  for  example,  I  was  having  dinnerwith  the  chief  information  offi¬ 
cers  of  all  the  regional  Bell  operating  companies  —  a  small  group,  but  one  which 
purchases  about  $4  billion  in  information  technology  hardware  and  software  per 
year.  The  usual  gripes  came  up  ( ‘  ‘We  need  more  money.  ”  ‘  ‘We  want  fewer  plat¬ 
forms.”  “We can’tfind enough  C++  programmers.”). 

But  then  I  heard  something  interesting.  One  of  the  CIOs  started  talking  about 


the  data  his  organization  has  on  its  top 
accounts — where  their  wires  are  connected 

beneath  the  streets,  what  the  logical  and  physical  configurations  look  like,  which  ris¬ 
ers  are  approaching  saturation  and  which  central  offices  serve  which  areas.  This  is 
information  that  many  customers  would  die  for,  and  that  would  keep  them  from 
switching  to  another  carrier  or  service  provider. 

Communications  networks  are  about  getting  the  right  information  to  the  right 
people  at  the  right  price  at  the  right  time.  Every  RBOC  has  a  model  for  configuring 
networks.  Customers  do  notsimplywant  the  information;  they  want  the  model. 

In  the  future  world  where  I  would  like  to  live,  compa¬ 
nies  would  retain  clients  not  because  they  charge  less,  but 
because  they  were  willing  to  trade  software  for  loyalty.  In 
this  world,  I  would  stay  with  Cisco  Systems,  Inc.,  3Com 
Corp.,  or  IBM  because  they  give  me  access  to  configura¬ 
tion  tools  or  simulation  software  thatallows  me  to  manage 
my  networks  in  real  time.  I  would  stay  with  Aetna  Life 
Insurance  Co.  because  it  gives  my  human  resources 
department  access  to  its  smorgasbord  of  benefits  software. 
I  would  buy  from  Staples,  Inc.  because  it  has  a  software 
model  that  charges  me  only  for  the  supplies  I  use  and  bills 
me  via  the  Internet. 

All  of  this  would  be  virtually  impossible  without  Inter¬ 
net  technology  overlaid  on  intranets.  Today,  there  are  sev¬ 
eral  drawbacks  to  the  Internet  that  may  cause  companies 
to  use  semiprivate,  virtual  private  or  totally  private  intranets.  Sure,  lack  of  security 
and  managed  bandwidth  allocation  are  problems.  But  in  the  long  run,  a  unified 
physical  network  where  I  can  control  my  internal  systems  and  externalize  them  to 
customers  will  outweigh  the  benefits  of  the  old-style  internal  networks,  which  were 
more  secure  but  were  islands.  In  short,  I  give  up  somethingbut  I  gain  more. 

In  the  end,  we  really  have  no  idea  which  of  our  internal  databases  and  models  we 
will  externalize,  which  we  have  to  semi-protect  and  which  we  have  to  fully  protect. 
But  what  the  Internet  does  is  combine  a  worldwide  mesh  of  TCP/IP  solutions  into  a 
hybrid  supemetwork.  If,  as  a  user,  I  am  smart  enough  to  leverage  what’s  happening 
outside  (on  the  Internet)  with  what  I  have  spent  millions  developing  inside  (my  own 
applications) ,  I  can  make  my  systems  do  double  duty — serve  my  internal  users  and 
woo  my  external  customers. 

Anderson  is  managing  director  of  The  Yankee  Group,  a  Boston-based  consultancy.  He 
can  be  reached  at  (617)  956-5000  or  via  the  Internet  at  handerson@yankeegroup.  com. 


it,  it’s  a  standard  and  it’s  open. 
When  viewed  in  light  of  Micro¬ 
soft’s  “let’s  extendjava  to  sup¬ 
port  onlyourplatforms”  initia¬ 
tive  and  handpicking  of  an 
“open  standards  committee” 
for  ActiveX,  statements  such  as 
Chase’s  appear  clearly  for  what 
they  are:  marketing  ‘  ‘bushwa.” 
Douglas  Franklin 
Atlanta 

High  on  Fibre  Channel 

Your  article  on  the  power 
struggle  between  Gigabit  Ether- 
netand  ATM  (Dec.  23/Dec.  30, 
1996,  page  66)  points  out  three 
ATM  weaknesses:  It  is  too  com¬ 
plex,  not  backward-compatible 
and  lacks  pure  bandwidth  capac¬ 
ity.  The  article  also  describes 
th  ree  Gigabi  t  Ethernet  weak¬ 
nesses:  We’re  a  long  way  from  a 
standard,  it  lacks  provisions  for 
end-to-end  flow  control,  and  it 
fails  to  ensure  quality  of  service. 
While  providing  a  valuable  com¬ 
parison,  you  omitted  a  solution 


that  is  available  today  and  over¬ 
comes  all  of  these  issues:  Fibre 
Channel. 

Though  admittedly  not  a 
mainstream  technology,  Fibre 
Channel  has  proven  its  mettle  in 
mission-critical  LAN  installa¬ 
tions  and  has  the  backing  of  an 
international  standards  body. 
Because  it  provides  end-to-end 
flow  control ,  quality  of  service , 
compatibility,  simplicity  and 
pure  bandwidth.  Fibre  Channel 
is  handling  the  toughest  network 
jobs.  Some  of  thesejobs,  such  as 
simultaneous  delivery  of  uncom¬ 
pressed  video,  voice  and  data, 
may  never  be  accomplished  by 
ATM  and  Gigabit  Ethernet. 

Please  consider  exploring 
not  only  the  mystical  promises  of 
future  technologies,  but  also 
solutions  and  standards  readers 
can  buy  today. 

Stephen  O’Hara 
President  and  CEO 
Ancor  Communications,  Inc. 
Minnetonka,  Minn. 


Secure  Windows 

I  enjoy  Dave  Kearns’  “Wired 
Windows”  column  immensely. 
Concerning  his  latest  column  on 
NT  security  (Jan.  6,  page  22) ,  I 
found  the  NTSEC  mailing  list 
(delivered  via  Internet  E-mail) 
to  be  very  informative  and  use¬ 
ful.  The  syntax  to  subscribe  is: 
subscribe  ntsecurity  <User- 
Name>@<DomainName>. 

I  also  discovered  that  Tom 
Sheldon’s  new  book  NT  Security 
Handbook  contains  a  wealth  of 
information  on  this  subject. 
Christopher  Waters 
Systems  engineer 
SBM  Computers  &  Communica¬ 
tions  Corp. 

Easton,  Pa. 

800  service  ceases 

Your  article  onjuno  Online 
Services  stated  that  users  can 
retrieve  their  E-mail  by  dialing 
an  800  or  local  phone  number 
(Jan.  6,  page  25).  Readers  should 
be  aware  thatjuno  is  dropping 


its  800  service.  Although  many 
subscribers  can  still  reachjuno 
through  a  local  number,  many 
will  now  have  to  use  a  long-dis¬ 
tance  number  to  access  E-mail 
from  home.  Still,  it  is  cheaper 

T  e  I  e  t  o  o  n  s 


than  paying$19.95amonthand 
long-distance  charges. 

Michael  Lester 
MIS  coordinator 
Baja  Marine  Corp. 

Bucyrus,  Ohio 


government  program 
called  "PCs  for  Poor- 
Tht  idtS  is  if  you  cant 
have  a  home,  at  least 
you  can  have  a  ^ 
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I  Section 


By  Winn  Schwartau 

"■Security  is  no  longer  just  about  security. 
Today,  security  is  about  resource  and 
information  management,  and  it  turns 
out  that  good  security  is  a  byproduct  of  a 
well-run  organization. 

The  corporate  enterprise  network  is 
constantly  changing;  in  three 
years  it  will  be 
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alone  won’t  make  you  safe. 
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different 

today,  and  in  five  years 
hve  changed  some  more.  Thus, 
r  plans  we  make  today  for  enter- 
anagement  and  security  must  be 
e  to  accommodate  an  unknown  topo¬ 
logical  future.  On  top  of  that,  the  typical 
large-scale  enterprise  network  is  geo¬ 
graphically  far-flung,  physically  hetero¬ 
geneous  and  logically  as  complex  as  a 
London  street  map.  In  short,  technical 
chaos. 

So  what’s  the  slightly  paranoid,  over¬ 
burdened,  down-  _ 

sized,  modern 
formation-rich,  sys- 
tems-reliant  orga¬ 
nization  to  do?  For 
those  of  you  waiting 
and  longing  for  a 
magic  security  pill 
or  the  Holy  Grail  of 
Security,  quit  hold¬ 
ing  your  breath. 

Technology  is  not 
the  first  place  to 

£pend  money  or  _ 

allot  resources;  it  is 

not  the  answer.  As  Stephen  Katz,  chief 
information  security  officer  for  Citibank, 
\  N.A.,  says,  “Get  rid  of  the  techno-babble. 
Thi§js  a  management  problem.” 

^  Who’s  the  boss? 

yfo r.  Eugene  Schultz,  information 
security  program  manager  at  the  consul¬ 
tancy  SRI  International,  Inc.  in  Menlo 


INSIDE: 

The  new  symmetrical  security  model. 

Page  44. 

8$*’  10  steps  to  securing  your  Web  site. 

Page  46. 

^  Authentication:  From  passwords  to 
retina.  Page  IP, 

^  Sage  advice  from  Citibank’s  security 
czar.  Page  48. 

!►  The  Holy  Grail  of  single  sign-on. 

Page:  48. 


Park,  Calif.,  says,  “Get  a  high-level  policy 
in  place.  You  gotta  do  that  first.  ’  ’  Set  your 
enterprise  network  security  goals  at  the 
highest  level  of  your  organization  —  the 
president  or  the  board  of  directors.  A 
mere  vice  president  of  information  tech¬ 
nology  will  not  do.  Unless  the  real  leader¬ 
ship  sets  the  vision  and  is  willing  to 
allocate  resources  to  adequately  secure 
and  manage  your  information  infra¬ 
structure,  not  much  will  get  done. 

Policy  goals  are  up  to  you.  You  might 
choose  to  prepare  your  enterprise  net¬ 
works  to  be  resilient  against  hurricanes, 
floods  and  computer  viruses,  but  not 
worry  about  hackers.  Whatever  policy 
and  goals  you  choose,  make  sure  they  are 
unambiguously  clear  and  that  everyone 
in  your  organization  is  made  aware  of 
them. 

Opening  Pandora’s  box 

Next,  you  must  find  out  what  com¬ 
prises  your  enterprise  network.  Carl 
Allen,  president  of  Infocore,  Inc.,  a 
Highland,  Utah-based  consultancy,  says, 
“Someone  has  to  know  what  you’ve 
got  —  your  network  schematics,  points 
of  access,  vulnerability  —  and  who’s 
in  charge.” 

_  At  the  same 

time,  an  informa¬ 
tion  asset  evaluation 
should  be  per¬ 
formed.  What  infor¬ 
mation  resources 
are  important 

enough  to  be  pro¬ 
tected,  and  where 
are  they  located? 
Stephen  Cobb,  di¬ 
rector  of  special  pro¬ 
jects  at  the  National 
Computer  Security 
Association 

(NCSA),  notes  that  “the  evaluation  pro¬ 
cess  helps  determine  the  relative  value  of 
data  to  a  company.  It  raises  awareness 
and  makes  people  think.” 

Top-to-bottom  employee  education 
and  security  management  cooperation 
should  go  without  saying,  but  so  many 
firms  miss  this.  You  need  to  have  the 
cooperation  of  the  security  staff, 
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Tackle  it  as  a  management  problem. 


throughout  the  entire  enterprise,  as  well 
as  the  support,  understanding  and  com¬ 
pliance  of  end  users.  An  ongoing  educa¬ 
tion  process  for  the  entire  staff  should  be 
tailored  to  meet  the  needs  of  each  group 
or  department.  “  [Otherwise]  security  will 
be  bypassed,  turned  off  or  ignored.  And 
that’s  worse  than  having  no  security  at 
all,”  Citibank’s  Katz  says. 

Technical  enterprise  security 

So  you’ve  got  your  policy,  you  know 
what  your  enterprise  network  looks  like, 
and  you’ve  got  everyone  onboard  and 
cooperating.  How  do  you  actually  imple¬ 
ment  a  security  plan  and  make  it  all  work 
together  seamlessly?  How  do  you  keep 
from  interfering  with  the  user  every  time 
he  wants  to  do  something? 

There  are  several  approaches  one  can 
take,  and  they  all  rest  on  the  foundation  of 
a  security  architecture.  Keep  in  mind, 
there  is  no  perfect  solution;  no  one  ven¬ 
dor  will  meet  all  of  your  needs  exactly, 
everywhere  throughout  your  organiza¬ 
tion,  but  many  may  come  close. 

Multilevel  security  (MLS)  is  one  choice 
the  government  has  been  exploring  for 
years.  The  premise  of  MLS  is  that  some 
data  can  only  be  viewed  by  people  who 
have  appropriate  security  clearance.  In 
the  Read  Down/Write  Up  MLS  policy, 
each  document  is  labeled  according  to  its 
sensitivity  and  the  security  clearance  of 
the  person  who  created  it.  So  someone 
with  a  lower  security  clearance  can  write 
up  to  Secret  or  Top  Secret,  but  not  down 
to  Unclassified.  Similarly,  the  person  with 
Secret  clearance  can  read  secret,  confi¬ 
dential  and  unclassified  documents,  but 
not  Top  Secret. 

Another  approach  to  MLS,  used  in 
products  such  as  NetLock  —  from  the 
Hughes  Electronics  Corp.  unit  with  the 
same  name  —  is  cryptographic  isolation. 
In  this  case,  all  documents  are  encrypted 
once  they  leave  the  workstation  for  either 
transmission  or  storage.  The  trick  is  that 
each  security  level  uses  a  different  encryp¬ 
tion  algorithm  and/or  encryption  key. 
Therefore,  only  Secret  keys  can  open 
Secret  documents  using  a  Secret  algo¬ 
rithm.  But  the  infrastructure  for  manag¬ 
ing  all  these  keys  requires  extra  levels  of 


protection  as  it  becomes  the  single  point 
of  failure  in  the  chain.  Complexity  reigns. 

Such  systems  can  be  cumbersome, 
expensive,  difficult  to  manage  and  subject 
to  rapid  obsolescence.  It  takes  so  long  to 
validate  the  system  works  that  by  the  time 
approval  is  given,  the  software  and  system 
are  a  generation  or  two  old.  As  Don  Sor¬ 
ter,  a  security  specialist  with  a  large  multi¬ 
national  firm  says,  ‘‘MLS?  It’s  gone.  Who 
cares  about  it?” 


Maybe  not  even  the  government  any¬ 
more.  It  is  slowly  migrating  to  new  models 
of  information  assurance,  detection  and 
response  because  MLS  proved  to  be  too 
expensive  and  restrictive. 

Centralized  security 

Most  companies  find  themselves  with  a 
decentralized  security  infrastructure, 
which  can  also  be  taken  to  mean  disorga¬ 
nized  and  capricious.  For  example,  secu¬ 
rity  often  falls  under  the  title  of 
ownership,  which  might  be  assigned  on 
the  basis  of  physical  location  —  all  New 
York  security  and  network  management  is 
controlled  by  Bill.  Or  it  might  be  on  the 
basis  of  legacy-based  applications  —  all 
transaction  processing  is  under  Sue’s 
management.  Or  ownership  might  be 
based  on  function  —  all  communications 
links  are  run  by  Bob. 

Since  the  end  of  the  1980s,  companies 
have  been  searching  for  a  better  technical 
solution,  and  it  might  be  finally  arriving. 


Vendors  of  enterprise  security  products 
are  coming  to  the  realization  that  the  real 
problem  is  enterprise  network  manage¬ 
ment. 

One  of  the  favored  technological 
approaches  for  dealing  with  distributed 
enterprise  networks  is  a  centralized  man¬ 
agement  scheme  that  includes  a  security 
server.  To  see  how  centralized  security 
works,  let’s  pretend  your  entire  organiza¬ 
tion  is  connected  just  the  way  you  want  it. 


Everyone  can  talk  to  everyone  they  need 
to;  the  communications  links  work,  the 
routers  and  bridges  route  and  bridge  as 
advertised.  Remote  dial-up  works  from 
anywhere  on  the  planet;  TCP/IP,  SNA 
and  NETBEUI  are  all  happy,  intercon¬ 
nected  campers. 

Now  let’s  add  security. 

From  an  enterprise  security  view,  we 
need  several  crucial  elements  that  ideally 
make  our  network  both  manageable  and 
reasonably  secure.  None  of  these  individ¬ 
ually  are  magic  security  pills,  but  taken 
together,  in  the  right  dosages,  they  can 
cure  many  of  our  ills. 

1.  First  is  the  ability  of  authorized  man¬ 
agers  to  add,  change,  or  delete  users 
across  a  wide  range  of  platforms,  operat¬ 
ing  systems  and  applications.  Also  known 
as  single  point  of  registration  (SPR),  this 
allows  a  security  manager  to  add  a  new 
user  to  a  centralized  database.  Think  of 
the  X.500  model  here  and  then  add 
resource  attributes.  So  User  A  or  User 


Group  Z  will  be  assigned  passwords,  user 
IDs,  access  rights  to  applications,  and 
resources  as  determined  by  job  function, 
seniority  or  need. 

This  single-point  security  manage¬ 
ment  step  consolidates  the  efforts  of  a 
dozen  or  more  people,  who  might  or 
might  not  have  the  time  to  add  Henry  to 
the  RACF  database.  The  SPR  takes  care  of 
it  all.  Now  this  is  not  a  quick  fix;  there  is 
pain  in  reaching  this  euphoric  technical 
aerie.  Especially  in  a  large  organization, 
picking  a  particular  platform  to  begin 
implementation  might  make  good  sense. 
Axent  Technologies,  Inc.,  for  example, 
advocates  conquering  one  technical 
domain  (or  operating  environment)  at  a 
time  rather  than  engaging  in  an  all-out 
technical  assault.  Its  centralized  Omni- 
Guard  products  are  designed  for  Unix, 
Netscape  Navigator,  NetWare  and  Win¬ 
dows  NT. 

2.  Whether  for  a  single  set  of  platforms 
or  the  heterogeneous  maelstrom  of  your 
networks,  another  highly  desirable  func¬ 
tion  is  single  sign-on ,  or  SSO . 

With  10  to  20  passwords  and  user  IDs 
for  as  many  resources  and  applications, 
security  breaks  down  because  the  user 
wants  to  do  his  job,  notjust  keep  track  of 
passwords.  So  he  writes  them  down.  SSO 
allows  the  user  to  authenticate  himself  at 
his  client  machine,  using  a  range  of  tech¬ 
niques  (see  story,  page  48).  Then  he  is 
automatically  authenticated  to  any  subse¬ 
quent  application  or  resource  he  may 
choose.  It’s  clean  and  neat  but  has  its  own 
set  of  problems  (see  story,  page  48). 

‘‘Automatic  authentication  between 
nodes  and  resources  is  essential  because 
today  there  is  no  such  thing  as  ‘my  net¬ 
work’  and  ‘their  network,’  ”  Infocore’s 
Allen  says.  “If  you  are  networked,  you  are 
networked.”  Unisys  Corp.,  for  one,  offers 
a  suite  of  single-point  security  products 
for  the  client/server  environment. 

3.  The  well-managed  enterprise  secu¬ 
rity  server  should  present  a  functionally 
transparent  view  of  the  user’s  universe 
because  it’s  critical  to  his  job  perfor¬ 
mance.  Regardless  of  which  client  operat¬ 
ing  system  is  in  use  (Windows  3.X,  NT  and 
95,  Unix  and  Macintosh),  the  graphical 
representation  of  his  access  to  applica- 


SECURITY  SANS  TECHNOLOGY 

Here  are  some  very  simple  actions  that  can  radically  improve  the  security  of  your 
enterprise  networks,  without  filling  the  coffers  of  security  vendors. 

Better  personnel  security,  especially  for  the  lowest  paid  people  on  your  staff,  such 
as  cleaning  staff  and  guards. 

Legal,  noninvasive  background  checks  on  potential  employees  can  help  avoid 
future  problems. 

When  hiring,  provide  new  staff  with  written  security  policies  and  require 
acknowledgement  of  their  terms  in  writing. 

Modify  all  of  your  sign-on  screens  to  reflect  your  security  policies,  a  suggestion  the 
Department  of  Justice  strongly  recommends. 

Enhance  physical  security  with  document  shredders  and/or  bum  bags. 

For  truly  networked  companies  that  want  to  minimize  theft  and  computer  viruses, 
disable  the  floppy  drives  throughout  your  organization. 

Develop  employee  rights  such  as  a  public  postings  area,  E-mail  privacy,  approved 
games  and  so  on.  Turn  your  staff  into  security  allies,  not  adversaries. 
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tions,  systems  and  resources  should 
reflect  the  underlying  and  invisible  secu¬ 
rity  concerns.  Simply  put:  If  the  user  is  not 
meant  to  have  access  to  some  distant  set  of 
selected  resources,  then  don’t  put  them 
on  the  screen. 

Richard  Gill,  director  of  channel  mar¬ 
keting  for  ICL  North  America,  advocates 
the  central  server  approach  for  different 
reasons.  This  approach  means  “the  user 
will  not  have  to  go  through  periodic, 
costly  retraining  every  time  there  is  a  tech¬ 
nical  reorganization  or  IT  makes  other 
network  changes,”  he  says.  The  user’s 
view  is  consistent,  the  security  server  infor¬ 
mation  is  updated,  and,  as  far  as  the  user  is 
concerned,  the  same  icon  gets  him  to 
where  he  wanted  to  go  anyway — invisibly. 

ICL’s  Access  Manager  was  the  first 
commercial  product  to  present  a  homo¬ 
geneous  view  to  the  user  of  a  complex 
global  network’s  resources  and  applica¬ 
tions. 


Now  there  are  many  different  tech¬ 
niques  to  achieve  this,  and  vendors  — 
including  Computer  Associates  Interna¬ 
tional,  Inc.  with  its  Unicenter  suite  —  will 
be  more  than  happy  to  tell  you  why  their 
approach  is  the  best.  But  there  is  no  stan¬ 
dard  vocabulary  among  vendors  yet,  so  be 
careful  to  make  sure  you  understand 
exactly  what  the  vendor  is  promising. 

4.  Our  ideal  enterprise  security  system 
will  also  want  to  be  able  to  detect  certain 
behavior  that  is  deemed  inappropriate, 
both  from  the  inside  and  the  outside. 
Intrusion  detection  is  getting  a  lot  of  press 
these  days  because  of  the  Internet.  But 
don’t  be  fooled.  Dan  Woolley,  vice  presi¬ 
dent  of  business  development  for  security 
vendor  Memco  Software,  Inc.,  warns, 
“Insiders  are  still  the  biggest  threat  to  our 
systems,  and  some  50%  of  computer 
crimes  still  occur  from  current  or  ex¬ 
employees.”  Has  a  user  repeatedly  tried 
to  access  one  resource  using  a  series  of 


unknown  passwords  within  a  short  period 
of  time?  Has  someone  tried  to  log  on  to 
three  different  terminals  or  clients  on 
three  different  conti¬ 
nents  at  the  same 
time? 

Internet  Security 
Systems,  Inc.  in 
Adanta  offers  tools 
to  test  your  perime¬ 
ter  security,  and 
WheelGroup  Corp. 
of  San  Antonio, 

Texas,  has  devel¬ 
oped  response  tools 
for  attempted  intru¬ 
sions.  More  security 
concerns  are  going 
to  be  response-ori¬ 
ented  as  opposed  to  merely  building  a 
high  wall. 

Intrusion  detection  systems  are  getting 
smarter,  and  you  may  hear  some  fancy 


ICL’s  Access  Manager  masks  complexity  by  giving 
the  user  a  single  password  to  myriad  computing 
resources. 


words  to  describe  them.  Some  claim  fuzzy 
logic,  which  is  better  left  to  elevator  and 
washing  machine  controls.  Others  claim 
artificial  intelli¬ 
gence  agents,  but 
they  have  never 
really  panned  out.  I 
prefer  the  term 
“heuristic”  to  de¬ 
scribe  a  self-learning 
system,  which 

changes  the  rules 
gradually  over  time. 

‘  ‘  Parameterization  ’  ’ 
means  you  choose  a 
set  of  out-of-bounds 
guidelines  where 
the  system  reacts  in 
some  manner.  But  if 


Security  goes  symmetrical 

Until  now,  you’ve  had  it  fairly  easy,  in  terms  of  security, 
but  the  dawning  of  the  Internet/intranet  era  means 
old  models  go  out  the  window. 

In  the  mainframe  era,  tens  of  thousands  of  dumb 
and  dumber  terminalswere  connected  to  computers  the  size 
ofOzwith  the  agility  of  the  Scarecrow  on  Valium.  Butsecurity 
was  easy.  Like  the  Yellow  Brick  Road,  all  we  Munchkins  had  to 
do  was  protect  the  access  roads  to  the  Emerald  City  of  our 
information  repositories. 

But  then  along  came  the  PC  and  the  LAN.  Offline  process¬ 
ing  compounded  the  security  problems.  Data  was  moving 
down  a  two-way  street  from  the  mainframe  to  the  LAN  server 
and  to  thousands  of  clients  farther  down  the  road. 

Howdid  we  secure  that  mess?  By  and  large,  we  didn’t 
bother  because  the  vast  majority  of  users  were  physically  inter¬ 
nal  to  the  organization,  and  remote  computing,  which  would 
multiply  the  threat,  wasn’ t  there  yet. 

But  now  we  add  the  Internet,  intranets  and  giant  remote 
servers  buried  in  missile  silos  in  the  Gobi  desert.  We  invite  the 
good  guys  into  our  networks  to  conduct  business,  yet  we  seek 
to  shun  unwanted  intruders  who  navigate  the  same  electronic 
highways. 

Security  today  must  be  symmetrical  to  be  effective:  All  of 
the  unidirectional  security  models  we  have  been  using  for 
more  than  two  decades  must  now  be  rethought  to  perfoim  in 

SYMMETRICAL  SECURITY  -  A  CHECKLIST  OF  OPTIONS  TO  CHOOSE  FROM 


Users 

Internal  resources 

Internet  access 

Upload 

Download 

Internal  employees 

Restrict  access  by  need 
Cryptography  -  Who  gets  it? 
Floppy  disk  -  Required? 

Hard  drive  access  from 
workstation  only? 

Restrict  access 
by  IP  address 

Any  company  information 
Restrict  by  IP  address 
Restrict  by  content 

Anything 

Nothing 

Restrict  by  IP  address 
Restrict  by  content 

External  employees 
(other  company  locations) 

Remote  authentication  prior 
to  access 

Restrict  access 
by  IP  address 

Any  company  information 
Restrict  by  IP  address 
Restrict  by  content 

Anything 

Nothing 

Restrict  by  IP  address 
Restrict  by  content 

Telecommuters 

Remote  ID 

Limited  access 

Restrict  access 
by  IP  address 
from  company 
IP/ISP 

Any  company  information 
Restrict  by  IP  address 
Restrict  by  content 

Anything 

Nothing 

Restrict  by  IP  address 
Restrict  by  content 

Vendors,  business  partners 
and  customers 

Access  only  to  vendor, 
partner  or  customer  areas 

NA 

Anything 

Nothing 

Filtered 

Anything 

Nothing 

Filtered 

Prospective  customers 

NA  -  Not  applicable 

Open  to  anyone:  Intranet 
isolation 

No  ID  required 

NA 

Anything 

Nothing 

Filtered 

Anything 

Nothing 

Filtered 

a  multidimensional  cloverleaf  of  two-way  traffic.  So  let’s  exam¬ 
ine  some  of  the  symmetrical  aspects  of  security  that  we  must 
address  in  a  way  that  won’ t  totally  restrict  our  activities.  You 
have  more  than  one  kind  of  employee,  each  of  which  has  dif¬ 
ferent  access  control  needs,  andyour  business  associates  also 
have  their  own  needs. 

You  have  to  decide  howusers  may  access  particular 
resources  either  inside  the  organization  or  outside  of  it.  Your 
view  of  the  network  becomes  increasingly  important  as  the 
definition  ofan  enterprise  network  evolves,  and  virtual  pri¬ 
vate  networks  take  on  new  meaning.  One  way  or  another,  we 
are  all  tied  together,  and  we  must  properly  manage  our  inter¬ 
connections. 

Two  critical  security  basics  are  at  work  here: 

•  Proper  user  identification  and  authentication .  Unless  you 
really  know  who  you  are  dealing  with,  you  have  little  real  con¬ 
trol  over  the  environment  (see  story,  page  48) . 

•  Enforcing  access  control  rules  in  a  symmetrical  fashion  that 
reflects  corporate  policy  and  takes  into  account  who  is  seek¬ 
ing  access. 

The  following  chart  provides  a  good  starting  point  for 
understanding  the  symmetrical  realities  of  enterprise  security 
and  management.  You  can  choose  the  options  that  best  suit 
your  needs. 

—  Winn  Schwartau 


E-mail 

Content-based 
(in  and  out) 

Restrict  by  IP  address 
(to  and  from) 

Content-based 
(in  and  out) 

Restrict  by  IP  address 
(to  and  from) 

Content-based 
(in  and  out) 

Restrict  by  IP  address 
(to  and  from) 

Content-based 
(in  and  out) 

Restrict  by  IP  address 
(to  and  from) 

Content-based 
(in  and  out) 

Restrict  by  IP  address 
(to  and  from) 


a  thousand  people  act  the  same  out-of- 
bounds  way  every  day,  the  out-of-bounds 
conditions  will  change  to  reflect  the 
actual  behavior  of  the  system.  PRC,  a 
McLean,  Va.-based  systems  integrator, 
and  Hughes  Aircraft  Co.  have  been  look¬ 
ing  at  various  approaches  under  the  cor¬ 
rect  premise  that  intrusion  detection 
should  be  dynamic  not  static. 

5.  A  security  system  that  can  react  auto¬ 
matically  to  problem  situations  is  critical, 
but  such  products  are  in  their  infancy. 
Some  reactions  may  be  fairly  benign,  such 
as  merely  sending  a  notice  to  the  console 
or  security  manager  screen.  Others  trig¬ 
ger  E-mail.  Some  of  the  better  reaction 
mechanisms  may  choose  to  run  a  prede¬ 
fined  process.  Unless  the  reaction  to  the 
intrusion  actually  accomplishes  some¬ 
thing,  such  as  halting  the  attack  or  identi¬ 
fying  the  offender,  it’s  pretty  useless. 

We’re  awaiting  further  developments 
in  this  area,  but  in  the  meantime,  make 
sure  you  emphasize  to  your  security  ven¬ 
dors  that  this  is  high  on  your  list. 

All  of  these  concerns  are  grounded  in 
security  basics.  Memco’s  Woolley  says, 
“Simplify  the  risks  and  then  adapt  to  the 
real  needs  you  have  identified.  Enterprise 
security  comes  down  to  perimeter 
defense,  transmission  defense,  data/sys¬ 
tems  integrity,  and  administrative  audit, 
alarm  and  response.  ’  ’ 

“Such  systems  offer  more  than  secu¬ 
rity,”  ICL’s  Gill  says.  “Real  cash  can  be 
saved  [through]  operational  efficiencies, 
simplified  online  systems  administration, 
less  functional  overlap  and  redundancies, 
and  lower  help  desk  costs.  They  all  add  up 
to  a  justification  for  investment  in  enter¬ 
prise  network  security.” 

Security  specialist  Sortor  maintains 
that  ‘  ‘you  have  to  pick  the  number  of  tech¬ 
nical  security  pieces  to  implement  based 
upon  your  real  needs.  Do  you  need  Kerbe¬ 
ros?  Do  you  need  crypto  everywhere?  How 
strong  does  your  authentication  need  to 
be?”  Perform  a  risk  analysis  to  identify  the 
problem  areas,  then  select  technologies 
to  solve  those  problems.  Stephen  Cobb 
sums  it  up:  “Concentrate  on  the  vulnera¬ 
bilities  and  the  access  points.” 

Making  it  all  work 

Given  that  there  is  no  magic  pill  that 
will  solve  your  enterprise  security  prob- 
See  Security,  page  46 
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lems  and  no  single  vendor  to  meet  all  your 
needs,  you  have  some  integration  ahead 
of  you.  Your  solution  will  not  be  cheap, 
but  the  payoff  of  enhanced  enterprise 
management  and  asset  protection  is  a 
worthy  goal. 

There  will  be  growing  pains,  so  take 
some  advice  from  Woolley,  who’s  been 
there:  “Whateveryou  do,  start  small.  Pilot 
it  first.”  Build  a  pilot  that,  once. working 
can  be  easily  scaled  in  size,  complexity  and 
distance.  Start  with  one  or,  at  most,  two 
platforms  and  get  the  feel  of  how  the  sys¬ 
tem  works.  Ask  your  vendor  for  30-,  60-  or 
90-day  trials,  and  be  prepared  to  pay  for 
consultation  services  for  initial  training. 

And  remember,  technology  is  not 
always  the  answer.  One  of  my  financial  cli¬ 
ents  was  worried  about  connecting  to  the 
Internet.  We  quickly  determined  the 
major  cause  for  concern  was  the  human 
resources  department;  if  it  was  online, 


sensitive  information  may  be  compro¬ 
mised.  The  company  expected  a  technol¬ 
ogy  solution,  maybe  an  intranet  firewall, 
so  the  rest  of  the  company  could  connect 
to  the  ’Net. 

In  a  matter  of  minutes,  we  determined 
that  out  of  more  than  5,000  employees, 
only  six  needed  access  to  the  human 
resources  computers,  and  those  same  six 
needed  only  basic  Internet  access  for  cor¬ 
porate  E-mail.  We  gave  them  a  quick,  inex¬ 
pensive  and  effective  solution:  an  air  gap. 
Disconnect  the  human  resources  comput¬ 
ers  from  the  company  network  and  the 
Internet.  Give  all  six  of  them  an  extra,  low- 
end  PC  (which  were  lying  around 
unused)  to  access  company  E-mail.  It  cost 
one-hundredth  of  what  the  company 
wanted  to  do  technically,  and  manage¬ 
ment  headaches  were  reduced  to  zero. 

Sometimes  technology  ain’t  all  it’s 
cracked  up  to  be. 

Schwartau  is  president  of  Interpact,  Inc., 
an  international  security  consulting  company 
based  in  Seminole,  Fla.  He  can  be  reached  at 
winn@infowar.com  or  http:/ /www.infowar. 
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World  Fusion  (www.nwfusion.com)  to  all  the  vendors  that  have  Web  sites  with  product  details.  Enterthe  number 
below  in  the  DocFinder  box  on  the  home  page. 
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(503)292-8682 
(408)364-6960 

(770)395-0150 

(210)494-3383 


10  steps  to  securing  your  Web  site 


By  Kevin  Stevens  and  Winn  Schwartau 

Nobody  wants  their  million-dollar  Web  site  to  become 
the  next  victim  of  Graffiti  Man,  who  rewrote  home 
pages  of  the  CIA,  Department  of  Justice  and  the  British 
Labour  Party.  Here  are  the  Top  10  things  you  can  do  to 
make  your  Web  site  a  safer  place  to  do  business. 

1.  Conduct  a  global  risk  assessment  of  your  comput¬ 
ing  environment  to  identify  any  possible  vulnerabilities 
that  could  impact  the  Web  site  or  vice  versa.  Find  out 
what  systems  you  have  and  how  back-end  systems  are 
connected  to  your  Web  server  -  and  if  they  really  need 
to  be.  Make  sure  unauthorized  users  can’t  gain  access  to 
sensitive  files  and  applications.  Consider  using  your 
audit  staff  for  this  step. 

2.  Avoid  conflict  of  duties.  Many  organizations’  Web 
administrators  are  also  responsible  for  security,  system 
upgrades,  testing,  programming  and  a  host  of  other 
functions  that  are  inherendy  in  conflict  with  good  secu¬ 
rity  policies.  If  your  Web  site  is  playing  second  fiddle  to 
other  duties,  vou  will  lose. 


ter  protocols  that  are  not  required 
for  business  operations.  Maintain  logs 
in  a  secure  directory  on  the  server,  or  on  a 
secured  server  not  directly  connected  to  the 
Web  server.  Review  the  logs  routinely  and 
don’t  let  system  administrators  access  them. 


5.  Common  Gateway  Interface  scripts 
and  programs,  as  well  as  client  executa¬ 
bles  should  be  evaluated  periodically  to 
ensure  that  no  improper  or  high-risk 
functions  are  possible  without  a  direct 
correlation  to  an  approved  business 
requirement. 

6.  Protect  the  Web  site  against  Domain 
Name  System  (DNS)  corruption  by  using  a 
cryptographic  authentication  system.  Alternatively,  verify 
the  identity  of  all  IP  sources  prior  to  granting  system 
access. 


! 


3.  Create  a  security  team.  Include 
representatives  from  security,  audit 
and  Web  site  administration.  On  a 
routine  basis,  the  team  should  review 
system  logs,  Computer  Emergency 
Response  Team  (CERT)  alerts,  and 
vendor  notices  of  upgrades  and 
patches. 

4.  Use  firewalls  and  routers  to  fil¬ 


Check  out  Fusion 
for  tips  on  how  to 
secure  services 
such  as  FTP, 
telnet,  SMTP  and 
NFS. 

Enter  the  number 
above  in  the  DocFinder  box  on  the 
home  page. 

http://www.nwPusion.com 


7.  When  you  install  any  new  hard¬ 
ware  or  software,  change  the  default 
settings  for  administrative  passwords 
and  operating  system  properties. 
Continue  to  change  passwords  -  at 
least  every  30  days.  System  adminis¬ 
trator  passwords  should  be  changed 
automatically  when  a  new  administra¬ 
tor  is  appointed. 

8.  Document  all  services  running 
on  the  site.  There  are  some  services 


in  particular  that  should  be  secured  as 
their  existence  and  corresponding  vulnera¬ 
bilities  are  known  to  many  hackers.  These 
include  File  Transfer  Protocool,  telnet, 

Simple  Mail  Transfer  Protocol,  Network  File 
System,  Trivial  FTP  and  Network  Information 
System. 

9.  Make  sure  your  Web  site  is  protected 
from  rogue  Java  applets.  There  are  a  couple 
of  generic  ways  to  mitigate  security  risks 
from  applets: 

•  For  Java-enabled  Web  browsers  such  as 
Netscape  Communications  Corp.’s  Navigator, 
you  can  configure  the  security  preferences  dia¬ 
log  box  to  prevent  downloading  of  Java  applets. 

•  Protect  yourself  from  attempts  to  modify  files, 
memory  or  threads  by  preventing  an  applet  from  access¬ 
ing  sensitive  information.  Using  the  applet  viewer,  the 
name  of  the  operating  system,  for  example,  can  be  hid¬ 
den  by  redefining  its  properties.  This  could  be  done  by 
changing  it  to  read  os.name=null. 

10.  Develop  a  backup  and  business  resumption  plan. 
Have  the  security  team  develop,  test  and  maintain  a 
checklist  of  scenarios  whereby  the  Web  site  cannot  func¬ 
tion.  Then  develop  a  response  plan  for  dealing  with 
each  scenario.  Update  the  plan  as  new  alerts  become 
known. 

Stevens  is  an  independent  marketing  consultant  and  audi¬ 
tor  based  in  Sykesville,  Md.  He  can  be  reached  at  (410)  795- 
3436. 
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Is  the  network  bringing  out  your  bad  side? 


You’re  asking  for  trouble  if  your  computer  room  is  a 
jungle  of  standalone  PCs. 

Relax!  The  ChatterBox™  Series  of  application  and 
communications  servers  can  make  you  feel 
human  again. 

Chatcom’s  family  of  managed  servers  are  the  muscle 
behind  thousands  of  dependable  networks  today. 


Our  PC-based  plug-in  servers-on-a-card 
provide  unprecedented  density,  high  availability 
and  scalability— from  one  to  1 12  servers 
—in  a  single  managed  rack. 

Call  now  for  a  free  network 
consolidation  guide. 

Ask  for  extension  200. 


ChatCom,  Inc. 

ChatterBox™  Communications  and  Server  Solutions 

(800)  456-1 333  Fax  (81 8)  882-91 34 

ChatCom,  Inc.,  96Q0Topanga  Canyon  Blvd.,  Chatsworth,  CA  91311 


©1996,  ChatCom,  Inc.  Trademarks  are  property  of  their  respective  owners 


http://www.jlchatcom.com 


Special  Section:  SECURING  THE  ENTERPRISE 


Authentication:  From  passwords  to  retina 


In  the  security  world,  there  are  three 
generally  accepted  means  of  identifying 
users,  each  with  its  pros  and  cons, 
strengths  and  weaknesses. 

1.  “Something  you  know”  is  the  sim¬ 
plest  and  weakest  means  of  user  identifi¬ 
cation —  a  personal  identification  num¬ 
ber,  a  social  security  number  or  anything 
you  keep  in  your  head.  The  conundrum  is 
simple:  If  the  passwor  d  is  easy  to  remem¬ 
ber,  it’s  easy  to  get  hacked.  If  it’s  compli¬ 
cated  en  ough  to  withstand  an  attack,  it’s 
too  hard  to  remember.  And  many  of  us 
have  so  many  passwords  that  we  write 
them  down,  defeating  their  purpose. 

Replacing  passwords  with  pass- 
phrases,  which  are  easier  to  remember 
and  harder  to  guess,  is  a  good  alternative. 
The  pass-phrase,  ‘  ‘There’s  no  place  like 
home”  has  27  characters  and  is  easy  to 
remember  but  hard  to  guess.  To  make  it 
even  stronger,  this  phrase  can  be  written 
in  a  number  ofways:  all  caps,  all  lowercase, 
some  mix  or  maybe  with  funky  punctua¬ 
tion.  The  point  is  to  be  creative. 

2.  With  the  stronger  ‘  ‘Something  you 
own  ”  ID  systems,  you  need  to  have  posses¬ 
sion  of  a  device  or  token,  such  as  the  mag¬ 
netic  strip  cards  we  use  at  automated 
teller  machines.  Smart  cards  offer  similar 
capabilities  with  more  power  and  flexibil¬ 
ity,  but  both  require  special  readers, 
which  are  cumbersome  and  expensive. 

Smart  PCMCIA  cards  offer  a  better 
form  factor  and  are  becoming  more  pop¬ 
ular  for  user  IDs. 

Another  wrinkle  is  “Something  you 
own,  somethingyou  know,”  which 
includes  hard  tokens  that  generate  one¬ 
time  passwords,  such  as  Security  Dynam¬ 


ics  Technologies,  Inc.’s  SecurelD  Card. 
Secure  Computing  Corp.  offers  a  suite 
that  includes  hard  tokens  and  a  software 
approach,  LOCKout,  which  embeds  the 
ID  in  to  a  computer,  freeing  the  user  from 
having  to  carry  around  a  card. 

3.  “Somethingyou  are”  refers  to  the 
biometric  characteristics  unique  to  each 
of  us.  It  offers  the  strongest  user  identifi¬ 
cation  and  authentication. 

Thumbprints  are  unique,  and  readers 
are  finally  coming  down  to  less  than  $300. 
In  five  years,  expect  them  on  your  credit 
cards  to  be  used  at  the  7-Eleven. 

Your  retinal  pattern  is  unique,  too,  but 
this  technique  is  still  expensive,  and  some 
folks  object  to  sticking  their  eyeball  into  a 
laser  beam.  Go  figure. 

Then  there’s  the  technology  that  can 
uniquely  identify  us  from  the  infrared  sig¬ 
nature  of  our  facial  capillary  pattern .  It 
works  from  as  far  away  as  50  meters  and 
can  penetrate  cosmetic  surgery,  disguises, 
colds  and  fever.  There  is  no  escape. 

Vocal  patterns  are  unique,  and  some 
telephone  companies  use  this  as  a  security 
gateway  for  maintenance.  But  the  ulti¬ 
mate  means  of  biometric  identification  is 
a  DNA  print.  Invasive,  yes.  Proof-positive, 
though.  Less  esoteric,  but  increasing  in 
popularity,  is  handwriting  comparisons. 

I  hope  I  don’ t  need  to  reinforce  the 
idea  that  passwords  are  too  weak  for  any 
serious  security  efforts  (there,  I  did  it  any¬ 
way)  .  Remember  that  user  identification 
is  the  most  critical  means  of  protecting 
your  information  assets,  and  that  securing 
the  front  door  with  adequate  locks  is  the 
first  and  biggest  step  you  can  take. 

—  Winn  Schwartau, 


DANUTA  OTFINOWSKI 


'OCX  SSL’ 


The  Holy  Grail  of  single  sign-on 


By  Ray  Kaplan  and  Winn  Schwartau 

Many  of  the  productivity  improvements  client/server 
technology  promised  have  never  been  realized  because 
users,  administrators  and  IS  management  continue  to 
juggle  multiple  user  IDs,  passwords  and  logon  proce¬ 
dures. 

Lest  you  consider  this  trivial,  the  Aerospace  Industries 
Association  points  out  that  an  organization  with  5,000 
employees  could  be  spending  as  much  as  $3.5  million 
annually  on  this  lost  productivity. 

There  are  any  number  of  single  sign-on  (SSO)  prod¬ 
ucts  that  purport  to  solve  the  problem.  Many  have  tradi¬ 
tionally  left  security  and  application  integration  ques¬ 
tions  unanswered,  but  that’s  beginning  to  change.  SSO 
vendors  are  stepping  up  to  the  plate  with  viable  technol¬ 
og)'  and  products  that  are  withstanding  the  rigors  seri¬ 
ous  large  commercial  enterprises  demand. 

Now  the  problem  is  defining  your  needs  and  select¬ 
ing  the  right  SSO  product.  To  help  you  along  in  that 
process,  we’ve  collected  these  rules  of  thumb. 

An  SSO  solution  should  not: 

•  Modify  the  kernels  of  any  operating  system  in  your 
infrastructure. 

•  Introduce  new  vulnerabilities  by  using  attack  tools  like 
Satan  when  they  become  available. 

•  Use  proprietary  cryptography,  protocols  and  APIs. 


•  Disrupt  or  break  existing  securi¬ 
ty  mechanisms  such  as  firewalls. 

•  Require  wholesale  changes  in 
the  way  your  infrastructure  is  con¬ 
figured. 

•  Represent  a  single  point  of  fail¬ 
ure  for  your  entire  enterprise  net¬ 
work. 


An  SSO  solution  should: 

•  Include  the  capability  to  support  security  services 
beyond  user  authentication,  such  as  confidentiality  and 
integrity. 

•  Scale  well  over  the  entire  enterprise. 

•  Be  efficient  in  its  use  of  network  resources  such  as 
bandwidth. 

•  Have  sufficient  administrative  capabilities  to  support 
the  size,  diversity  and  distribution  of  your  user  commu¬ 
nity. 

•  Use  well-known,  widely  accepted,  standards-based 
cryptography,  protocols  and  APIs. 

•  Be  able  to  immediately  deal  with  the  emergency  revo¬ 
cation  of  individual  user  IDs  and  passwords. 

•  Enable  you  to  quickly  and  efficiently  bulk-load  and 
activate  large  numbers  of  users. 

•  Have  the  capability  to  support  other  components  in 
your  infrastructure  beyond  workstations  and  servers, 


*'  such  as  routers,  firewalls  and  network 

X 

•mi  jr 


management  systems. 


An  SSO  solution  vendor  should: 

•  Be  upfront  with  the  limitations  of  its 
technology,  products  and  company. 

•  Have  experience  in  the  design,  imple¬ 
mentation  and  deployment  of  SSO. 

•  Have  depth  and  breadth  in  its  network 
security-related  experience. 

•  Provide  an  adequate  level  of  support  services,  such  as 
customer  support  and  consulting. 

•  Demonstrate  an  understanding  of  your  needs  and  an 
ability  to  meet  them. 

•  Have  good  references. 

•  Be  willing  to  discuss  the  total  cost  and  magnitude  of 
change  that  will  be  required  by  the  system. 

•  Be  capable  of  helping  your  system  and  application 
vendors  integrate  the  SSO  solution  with  their  products. 

•  Be  capable  of  customizing  its  product  to  meet  any  spe¬ 
cial  needs  you  identify. 

•  Have  a  strategy  that  will  allow  you  to  move  forward 
and  adopt  new  idioms  as  they  develop. 

Kaplan  is  a  security  consultant  with  CyberSafe  Corp.  in 
Issaquah,  Wash.  He  can  be  reached  at  ray.kaplan @ 
cybersafe.com. 
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SYSTEMS 


At  the  Forefront  of  ATM  Networking 


©1996  FORE  Systems,  Inc.  FORE  Systems  is  a  registered  trademark 
of  FORE  Systems,  Inc.  ©Dreamworks  L.L.C.  '  Prince  of  Egypt"  is  a 
trademark  of  Dreamworks  L.L.C. 


HOW  FORE  ATM 


Helped 


DREAMWORKS 


Animate 


ITS  SUCCESS. 


needed  a  high  performance  multi-service 
network  that  would  connect  the  team  of 
directors,  animators,  layout  artists 
and  producers  on  the  picture. 

"Once  we  decided  on  ATM,  we 
looked  at  various  vendors,  and 
FORE  had  the  most  extensive 
experience.  Their  support  and 
commitment  to  ATM  were  well 
known  in  the  industry." 

Among  the  countless  advan¬ 
tages  of  FORE  ATM  for  Dreamworks 
was  "the  ability  to  reserve 
bandwidth  over  the  system  so 
we  could  deliver  JPEG  video 
streams,  enabling  our  artists  to 
track  the  current  state  of  the  movie.  It 
also  means  that  Jeffrey  Katzenberg  can 
call  it  up  on  his  desktop  and  monitor 
the  film's  progress.'' 

"The  impact  of  FORE  ATM  is  better 
collaboration,  greater  creativity  and  a 
faster  approval  cycle. 

As  far  as  facilitating  the  process,  FORE  has 
been  incredible." 

FORE  ATM  can  brighten  the  big 
picture  for  you,  too.  For  a  free  Guide  to 
ATM,  contact  us  at  1-888-404-0444, 
info@fore.com  or  http://www.fore.com. 


"If  an  artist  has  to  stop  and  wait  for 
an  electronic  process,  work  slows  down, 

and  that's  deadly  on  a  movie.' 

That's  Bill  Villarreal,  co-head  of  tech¬ 
nology  at  Dreamworks  SKG,  explaining 
the  challenges  of  applying  cutting-edge 
technology  to  traditional  hand  crafted 
animation.  Dreamworks  is  currently 
producing  its  first  animated  feature, 
"Prince  of  Egypt,"  and  Villarreal 


Bill  Villarreal 

Co-Head  of  Technology 
Dreamworks  SKG 
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Pulling  NT  users 
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Synchronicity 
for  NT 


Product 

Vendor 

Price 


Pros 


Cons 


Synchronicity  for  NT 

NetVision,  Inc. 

(801)  785-5190 
www.netvisn.com 


Overall  score  8.4 

Directory  services  (30%)  9 

Management/administration  (20%)  9 
Enterprise  scalability  (20%)  8 

Flexibility  and  ease  of  use  (10%)  8 

Stability  (10%)  8 

Installation  (5%)  7 

Documentation  (5%)  6 


Synchronicity  Starter  Kit  = 

1  NDS  server  license  plus 
25  NT  user  licenses  -  $995 
Additional  options: 

•  1  NDS  server  license  -  $300 

•  10  NDS  server  licenses  -  $2,500 

•  20  NDS  server  licenses  -  $4,000 

•  50  NDS  server  licenses  -  $7,500 

•  100  NDS  server  licenses  -  $10,000 

•  10  NT  user  licenses  -  $300 

•  25  NT  user  licenses  -  $725 

•  50  NT  user  licenses  -  $1 ,400 

•  100  NT  user  licenses  -  $2,700 

•  500  NT  user  licenses  -  $13,000 

•  1,000  NT  user  licenses  -  $25,000 

▲  Clean  installation  -  includes  NetWare  upgrade  files  (if  needed). 

A  Good  documentation  on  CD  using  included  Envoy  viewer  and  Word 
6.X  format. 

A  Places  NT  users  under  superior  NDS  management  applicadons. 

▼  Can’t  control  user  access  to  NT  files  or  directories. 

▼  Works  in  only  one  direction  -  NetWare  to  NT. 

▼  Combination  of  NetWare  Administrator  and  Synchronicity  on  NT  server 
eats  memory. 


If  you’re  ured  of  complaining  about 
Windows  NT’s  underpowered 
domain  services,  do  something 
about  it  —  manage  NT  with  Novell 
Directory  Services  (NDS).  That’s  the 
premise  of  NetVision,  Inc.’s  Syn¬ 
chronicity  for  NT.  Synchronicity  lets 
you  use  Novell,  Inc.’s  NetWare  Adminis¬ 
trator  (NWAdmin)  program  to  manage 
NT  domain  and  workgroup  clients. 

While  it  plugs  directory  holes  in  a  man¬ 
ner  somewhat  similar  to  Banyan  Systems, 
Inc.’s  StreetTalk  for  Windows  NT 
(reviewed  last  week),  Synchronicity  for 
NT  succeeds  where  StreetTalk  fails.  This  is 
because  it  uses  a  stable  administradon  cli¬ 
ent  and  supports  more  than  just  basic  file, 
print  and  messaging  services,  thanks  to  a 
moderate  but  growing  list  of  NDS- 
enabled  applications.  Providing  a  single 
management  point  for  all  network  clients, 
as  Synchronicity  for  NT  does,  makes  good 
sense. 


Running  Synchronicity 

Synchronicity  requires  you  to  have  a 
NetWare  4. 1 0  or  IntranetWare  4.11  server 
on  the  network,  and  it  runs  on  Windows 
NT  3.51  or  4.0.  If  you’re  still  trying  to  run 
Microsoft  Corp.’s  Windows  NT  client  for 
NetWare,  give  up.  Synchronicity  requires 
Novell  NetWare  Client  Version  4.0  for  NT, 
which  makes  the  NT  stadon  a  full  member 
of  NDS  and  loads  special  versions  of 
NWAdmin  for  NT. 

Synchronicity  for  NT  installation  rou¬ 
tinely  copies  several  NetWare  Loadable 
Modules  (NLM)  to  NetWare  servers, 
modifies  the  NDS  schema  by  adding  NT 


objects  to  manage,  and  gives  you  what 
Novell  calls  “snapins”  for  NWAdmin  pro¬ 
grams  for  both  Windows  NT  and  95.  No 
changes  are  made  to  the  NT  side  during 
installation,  except  for  the  addition  of  syn¬ 
chronization  software  that  implements 
updates  sent  from  NDS. 

NDS  absorbs  the  NT  domain  you  spec¬ 
ify.  You  may  clump  NT  domains  into  a  sin¬ 
gle  NDS  branch  or  spread  them  out 
anywhere  on  your  NDS  tree.  If  your  com¬ 
pany  has  builtyour  NDS  tree  with  separate 
branches  for  each  workgroup,  Synchro¬ 
nicity  allows  you  to  merge  your  NT 
domains  into  each  local  workgroup,  as 
well.  NDS  then  holds  all  the  informadon, 
sending  NT  details  back  to  the  NT  server 
only  as  needed. 

To  manage  objects  on  NT  systems,  you 
simply  use  NWAdmin.  Normal  user  man¬ 
agement  tasks  for  NT  can  be  handled  by 
NDS  administrators  with  litde  extra  time. 
Synchronicity  passes  NDS  changes  down 
to  NT  domains.  You  can’t 
make  changes  to  NT 
domains  controlled  by  NDS 
by  using  native  NT  tools  — 
Synchronicity  is  not  a  two- 
way  street  —  but  since 
NWAdmin  offers  more  fea¬ 
tures,  functionality  and  con¬ 
trol  than  NT  user  man¬ 
agement  programs,  this  is 
not  a  problem.  Some  de¬ 
tails,  such  as  access  to  the 
NT  disk,  must  still  be  con¬ 
trolled  using  the  NT  admin¬ 
istration  tools. 

Setting  access  by  groups 
makes  life  easier  because 
NT  disk  access  controls  are 
less  fine-grained  than  those 
for  NetWare  users  and  vol¬ 
umes. 

Users  from  the  NT 
domain  appear  under  their 
own  icon  in  NWAdmin.  “Synchronized” 
users  must  be  created  in  a  portion  of  the 
NDS  tree  common  to  the  NDS  user  con¬ 
text  and  the  NT  domain  (see  screenshot) . 
Configuration  settings  within  Synchro¬ 
nicity  determine  whether  newly  created 
users  are  automatically  linked,  and 
whether  to  sync  their  passwords.  External 
programs  are  supplied  to  synchronize 
passwords  for  linked  users  created  before 
installing  Synchronicity. 

Importing  existing  users  to  either  NT 
or  NDS  creates  potential  for  name  con¬ 
flict,  and  Synchronicity  takes  that  into 
account.  NT  users  can  be  placed  in  any 


NDS  container,  and  algorithms  are  avail¬ 
able  to  ensure  names  are  unique. 

Passwords  can  be  assigned,  set  to  the 
user  name  or  left  off.  Users  may  be  forced 
to  supply  a  new  password  the  first  time 
they  log  on. 

User  profile  modifications  common 
between  NT  and  NetWare  will  show  when 
applied  to  either  the  NT  group  user  or  the 
corresponding  NDS  user, 
assuming  the  two  are  synchro¬ 
nized. 

In  other  words,  changing 
the  allowed  logon  times  for 
the  NDS  user  will  also  change 
those  times  for  the  synchro¬ 
nized  NT  user.  When  the  NT 
synchronizer  program  is 
active,  the  change  is  nearly 
instantaneous,  at  least  on  the 
small  lab  network. 

User  account  items  tracked  by  NDS, 
such  as  charges  for  disk  use  or  connect 
time,  don’t  have  analogs  on  the  NT  side. 
Synchronicity  obviously  can’ t  do  anything 
about  that.  The  only  conuol  NDS  has  over 
the  NT  workgroup  server  is  typical  user 


details,  such  as  forcing  password  changes 
and  allowable  connection  times.  You 
can’t  conuol  user  access  to  NT  files  and 
directories. 

Synchronicity  also  does  not  let  you  cre¬ 
ate  a  printer  or  print  queue  on  the  NT 
domain  from  NWAdmin. 

Not  burdensome 

The  NLM  programs, 
including  a  console  program 
that  tracks  events  queued  and 
server  memory  used,  continu¬ 
ously  run  in  the  background 
on  the  NetWare  server. 

Maximum  memory  use  on 
the  server  during  the  test  was 
11K  bytes;  the  NetVision 
Global  Event  Services  NLM  is 
not  a  resource  hog.  The  NT 
synchronization  program  may 
run  constantly,  or  you  can  force  updates 
after  making  NDS  changes.  For  active  sys¬ 
tems  you  should  leave  it  on  so  user  profile 
changes  happen  immediately. 

We  saw  no  impact  on  the  NetWare 
server  in  normal  background  mode, 
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The  GCS-D0MAIN  shows  the  NT  domain  objects  imported  into  NDS.  The 
foreground  window  shows  the  NT  user  information  displayed  within  the 
Net  WareAdm  inistrator program. 


Providing  a  single 
management  point 
for  all  network 
clients,  as  Synchro¬ 
nicity  for  NT  does, 
makes  good  sense. 
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although  early  NDS  modifications 
bumped  utilization  up  slighdy.  However, 
busy  application  servers  would  be  a  poor 
choice  for  running  Synchronicity  in  the 
background;  the  occasional  CPU  spike 
from  updates  adds  to  the  server  load,  and 
synchronizing  is  delayed. 

Log  information  tracking  user  modifi¬ 
cations  can  be  written  to  the  NT  System 


For  dueling  white  papers 
from  Novell  and  Microsoft 
about  directory  and  domain 
services,  enter  the  number 
at  right  in  the 
on  the  home 


http://www.nwPusion.com 


Event  Log  or  a  file  of  your  choice.  You  can 
limit  file  size  so  as  not  to  be  surprised  one 
day  by  the  log  file  taking  over  your  disk, 
and  you  can  set  how  much  change  infor¬ 
mation  is  logged. 

Synchronicity  for  NT  installs  easily  and 
includes  comprehensive  online  docu¬ 
mentation.  Installing  the  product  on  a 
NetWare  4. 10  server  may  require  multiple 


►  IntraNet  Vendor  Showcase 


BERKELEY  SOFTWARE  DESIGN,  INC. 

Berkeley  Software  Design,  Inc. 

800-800-4BSD 

http: / /www . bsdi . com 


Microsystem  Software,  Inc. 

800-828-2600 

http : / /www . cyberpatrol . com 


Internetworking  Specialist* 

Capella  Worldwide  Networking 

800-591-4264 

http: / /www . capella . com 

G3  Check  Point 

Software  Technologies  Ltd 

Checkpoint  Software  Technologies 

800-429-4391 

http: / /www . checkpoint .com 

ComNet  booth  #275 


Products  as  Solutions 


Eastern  Research,  Inc. 

800-337-4374 

http: / /www . erinc . com 

ComNet  booth  #2419 


EXIDE 

ELECTRONICS 

Strategic  Power  Management” 


Exide  Electronics  Group,  Inc. 

800- 554-3448/919-872-3020 

http : / /www . exide . com 

fOLio. 

Folio  Corporation 

801- 229-6700 

http: / /www . folio . com 

ComNet  booth  #134 

InterCon 

InterCon  Systems  Corporation 

800-468-7866 

http : / /www . intercon. com 


microplex 

Microplex  Systems  Ltd. 

800-665-7798 

http:/ /www .microplex. com 

ComNet  booth  #399 


'::p§^  Momentum 
=2=  Systems  Limited 

Momentum  Systems  Limited 

609-727-0777 

http : / /www .momsys . com 


V  B  U  R  INTERNET  BUSINESS  P  A  R  I  II  £  II 

NetPartners  Internet  Solutions 

800-723-1  1  66/61  9-505-3020 

http : / /www . netpart . com 


NCRTEL 

Nortel 

800-4-NORTEL,  dept.  54 
http: / /www .nortel . com/atm 

ComNet  booth  #1016 


OPEN  TEXT 

Intranet 

Open  Text  Corporation 

800-499-6544 

http: / /www .opentext.com 


man 


data  communications 


RAD  Data  Communications 

800-444-7234 
http: / /www . rad . com 

ComNet  booth  #1618 


Internet  Security  Systems 

800-776-2362 

http: /  / www . i s  s .net 


jgsync 

Sync  Research 

71 4-588-2070 

http : / /www .sync.com 

ComNet  booth  #970 


Although  every  effort  has  been 
made  to  make  this  listing  as 
complete  as  possible,  Network 
World  does  not  assume  liability 
for  errors  or  omissions. 


file  upgrades,  but  all  the  necessary  files 
are  included  on  the  CD-ROM  and  can  be 
applied  automatically.  We  had  to  reboot 
the  Windows  NT  server  and  the  station 
modifying  the  NWAdmin  program  to 
load  some  of  the  new  programs. 

The  NetWare  server  did  not  require 
rebooting;  loading  one  new  Synchronic¬ 
ity  NLM  pulled  up  the  second  required 
NLM  automatically. 

Snapins  to  the  NT  version  of  NWAd¬ 
min  worked  without  our  intervention, 
which  is  not  always  the  case,  even  with 
Novell’s  own  snapins. 

Good  for  mixed  environments 

We  don’t  believe  Synchronicity  could 
be  much  better  in  this  first  Version  if 
Novell  itself  had  released  the  product, 
although  it  could  be  less  expensive.  The 
installation  works,  once  you  get  it  started, 
and  the  product  does  everything  cor¬ 
rectly.  It  would  be  nice  if  Version  1.1 
allowed  some  level  of  NT  Server  disk 
access  control. 


We  ran  IntranetWare  4.11  and  Windows 
NT  4.0  (Build  1381)  on  identical  Gateway 
2000,  Inc.  Pentium  120-MHz  systems  with 
32M  bytes  of  RAM.  The  Windows  NT  system 
included  Novell,  Inc.’s  NetWare  Client32  for 
Windows  NT  software.  Primary  test  clients 
were  a  Bitwise  Designs,  Inc.  Portable  386 
running  Windows  3.1  and  an  Acer  America 
Corp.  Open  Pentium  75  running  Windows95. 

We  set  up  NetWare  clients  with  no  access 
to  Windows  NT  Server,  and  vice  versa  with 
Windows  NTServer  clients.  We  then  used 
NetVision,  Inc.’s  Synchronicity  to  provide 
access  and  management  between  the  two 
previously  separate  networks. 


Network  managers  in  mixed  environ¬ 
ments  will  find  Synchronicity  a  help.  How¬ 
ever,  the  price  of  adding  both  NetWare 
and  Synchronicity  makes  it  fairly  expen¬ 
sive  to  use  this  productfor  an  all-NT  shop. 

Microsoft  and  Novell  could  each  make 
the  product  obsolete,  but  recent  delays 
from  both  companies  suggest  the  niche 
for  Synchronicity  will  exist  for  quite  some 
time. 

The  alliance  is  a 
cooperative  of  users, 
consultants,  educators, 
and  integrators  that 
applies  its  technical  and  business  skills 
to  analyze  and  compare  strategic 
network  products. 

Gaskin  is  a  Dallas-area  network  consultant 
and  author.  His  two  latest  books  are 
Corporate  Politics  and  the  Internet: 
Connection  Without  Controversy  from 
Prentice  Hall  and  The  Complete  Guide  to 
NetWare  4.1 1 /IntranetWare  from  Sybex. 
Gaskin  may  be  reached  at  james@gaskin.com. 
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Good  documentation  untangles  wiring  snarls 


■  Training  firms  Global  Knowl¬ 
edge  Network,  Inc.  of  Wal¬ 
tham,  Mass.,  and  Migration 
Software  Systems,  Ltd.  of 

San  Jose,  Calif,  have  teamed  to 
develop  a  seminar  that focuses  on 
data  warehousing. 

The  three-day  seminar,  titled 
Data  Warehousing  Fundamentals, 
will  be  held  in  Chicago  on  Feb.  24- 
26;  in  Santa  Clara,  Calif,  on 
March  10-12;  in  Washington,  D.  C. 
on  April  7-9;  and  in  New  York  on 
May  5-7.  The  seminar  costs  $1,500. 
A  five-day,  hands-on  course  called 
Data  Warehouse  Design  and 
Implementation  will  run  this 
spring  and  will  cost  $2,500. 

Global  Knowledge  Network: 
(800)332-5656. 

■  Oracle  Corp.’s  Oracle  Edu¬ 
cation  division  has  activated  its 

Oracle  Learning  Architec¬ 
ture  Web  site  (http://ola.us.ora- 
cle.com),  where  registered  users 
can  run  interactive  training 
programs. 

Users  can  access  more  than  75 
multimedia  training  programs 
with  instructions  for  using  Ora¬ 
cle,  Microsoft  Corp.,  Novell,  Inc. 
and  Lotus  Development  Corp. 
products.  There  are  also  courses 
covering  topics  such  as  using 
TCP/IP.  Users  can  view  course 
abstracts  and  run  demo  programs 
before  signing  up  to  take  a 
fee-based  course. 

Oracle  Education:  (415)  506- 
7000. 


By  David  Zehrung 

You  know  the  drill.  It’s  time  to 
expand  your  phone  system,  but 
all  you  can  envision  is  a  contrac¬ 
tor  spending  hours  of  billable 
time  combing  through  spaghetti 
bowls  of  wires  —  voice  wires,  data 
wires,  wires  to  nowhere  —  look¬ 
ing  for  the  right  ones  to  replace. 

What  you  need  is  a  good  docu¬ 
mentation  system  that  points  the 
way.  Such  a  system  tracks  all  the 
details  about  the  wiring,  hard¬ 
ware  and  software  used  in  vari¬ 
ous  network  systems.  It  will  also 
help  internal  staff  more  quickly 
execute  simple  moves,  adds  and 
changes,  as  well  as  pave  the  way 
to  more  easily  integrate  tele¬ 
phony  and  computer  systems  on 
a  single  cable  plant. 

Despite  those  obvious  bene¬ 
fits,  we’ve  estimated  that  80%  of 
our  client  organizations  have  no 
ongoing  cabling  documentation 
process  in  place. 

Sure,  organizations  get  dia¬ 
grams  that  map  out  the  cabling 
plant  as  it  was  originally  installed. 
But  few  companies  faithfully 
update  those  diagrams  as 
changes  are  made,  so  the  dia¬ 
grams  rarely  reflect  reality. 

Instead,  you  should  have  a  sys¬ 
tem  that  enables  you  to  easily 
document  an  existing  cabling 
plant  and  modify  it  as  changes 
are  made.  The  system  can  start 
out  being  something  as  simple  as 
a  spreadsheet  and  evolve  into 
one  that  spans  multiple  data¬ 
bases. 


Many  off-the-shelf  documen¬ 
tation  programs  are  available, 
but  it  may  be  better  to  develop  a 
homegrown  approach,  one  tai¬ 
lored  to  your  needs.  Whether 
you  use  a  spreadsheet  or  data¬ 
base,  there  are  a  number  of  data 
fields  you’ll  want  to  include  in  a 
documentation  program.  These 
include  user  name,  department, 
type  of  device  being  connected, 
data  address,  physical  port  ID, 
riser  cable  assignment  and  wall 
jack  number. 

When  establishing  such  a  doc¬ 
umentation  system,  you  should 
first  develop  an  identification 
scheme  that  makes  sense  for 
your  physical  environment.  If 
your  firm  has  multiple  buildings, 
for  example,  you  may  need  to 
adopt  a  naming  scheme  that 
requires  separate  spreadsheets 
or  database  files  for  each  build¬ 
ing. 

Next,  you  need  to  devise  a  log¬ 
ical  way  to  describe  your  physical 
system  so  your  spreadsheet  or 
database  provides  an  accurate 
lay  of  the  land,  a  view  that’s  clear 
enough  that  someone  can 
quickly  locate  the  specific  cable 
that  connects  PC  A  to  LAN  B,  for 
example.  Whenever  remodeling 
results  in  physically  moving  a  sys¬ 
tem,  make  it  the  responsibility  of 
that  system’s  administrator  to 
feed  updates  to  the  documenta¬ 
tion  system. 

If  you’re  going  to  design  your 
own  program,  remember  to 
keep  it  simple.  To  see  if  you’ve 


come  up  with  a  simple  yet  work¬ 
able  cable  numbering  scheme, 
try  visualizing  a  remodeling  pro¬ 
ject  that  requires  relocating  sev¬ 
eral  cables.  If  the  scheme  still 
makes  sense  after  the  move, 
you’re  in  business. 


Workl 


Go  online  for  sample  documentation 
that  lists  13  key  pieces  of  information 
about  your  wiring  plan. 

Then  download  the  Microsoft  Word 
file  and  a  description  of  information 
kept  in  each  field. 

Enter  the  number  ^ 

to  the  right  in  ^  -jt 
the  DocFinder  A  /I  A  7 

box  on  the  U  H  U  I 

home  page.  s- 


You  may  get  into  trouble  if 
the  cable  identification  system  is 
based  on  room  numbers  or  some 
tricky  sequential  number  assign¬ 
ments  because  it  may  break 
down  when  changes  or  additions 
are  made.  This  is  because  cables 
may  go  to  new  rooms  or  a 
sequence  may  get  broken.  So 
keep  cable  ID  numbers  as  short 
as  possible  but  long  enough  to 
identify  the  closet  where  each 
cable  terminates. 

Avoid  having  different  num¬ 
bering  schemes  for  data  and 


voice  cables,  even  if  they  are  not 
the  same  kind  of  cable.  Rather, 
you  can  number  them  in  differ¬ 
ent  ranges  of  the  same  number¬ 
ing  scheme,  according  to  where 
they  terminate  in  the  wiring 
closet. 

For  instance,  if  the  eighth 
floor  of  your  building  has  closets 
A,  B,  and  C,  you  can  number 
cables  starting  with  an  8  to  indi¬ 
cate  the  floor  number,  followed 
by  an  A,  B  or  C  to  relate  to  the 
closetwhere  the  wire  terminates, 
and  then  a  three-digit  code  to 
indicate  where  the  cable  termi¬ 
nates  in  the  closet. 

This  could  result  in  combina¬ 
tions  such  as  8A003,  8B  111  or 
8C032.  Post  a  simple  one-page 
key  for  reading  this  numbering 
system  in  every  wiring  closet  as  a 
reference  for  technicians. 

Above  all,  remember  that  a 
good  documentation  system  lets 
you  plan  from  a  centralized 
office  and  easily  direct  vendors 
in  remote  work  areas.  This  mini¬ 
mizes  the  amount  of  testing,  trac¬ 
ing  and  new  installation  work 
your  staff  and  vendors  must  do  to 
support  expansions  and  repairs. 
This  way,  there  is  minimal  dis¬ 
ruption  to  business  operations. 

Zehrung  is  a  communications 
technology  analyst  at  Sparling,  Inc., 
an  electrical  engineering,  lighting 
design  and  technology  consulting 
firm  in  Seattle.  He  can  be  reached  by 
phone  at  (206)  667-0548  or  via 
E-mail  at  djz@sparling.  com. 


NETWORK  BOOK  REPORT 


Corporate  Politics  and  the  Internet: 
Connection  Without  Controversy 
James  Gaskin  (Upper  Saddle  River, 
N.J.,  Prentice  Hall)  452  pp.,  $24.95. 
Phone:  (800)  947-7700;  ISBN:  0-13- 
651803-6. 

Network  consultant  James  Gaskin 
enlightens  IS  executives,  network 
managers  and  Webmasters  about  the 
Internet-related  legal,  ethical  and  per¬ 
sonnel  challenges  brought  about  by 
technology  in  the  workplace.  He  offers 
strategies  for  managing  things  such  as 
’Net  access  privileges,  productivity 
and  security.  He  also  provides  sugges¬ 
tions  for  dealing  with  discrimination. 


intellectual  px  operty  and  defamation  problems. 


Follow  the  links  from  Fusion  to  the 
publishers'  Web  sites  for  more 
info  on  these  books. 

Enter  the  number  u  0* 

to  the  right  in  *<.  ifc  ^ 

0  4  0  9 


the  DocFinder 
box  on  the 
home  page. 


A 


frsio^ 


Network  World  Fusion 

http://www.nwfusion.com 


SNA  Interconnections 
John  Chiong  (New  York,  McGraw-Hill) 
313  pp.,  $55.  Phone:  (800)  262-4729; 
ISBN:  0-07-01 1486-2. 

This  book  gives  you  the  facts  on  how 
SNA  and  TCP/IP  can  work  together  in 
multiprotocol  internetworking  envi¬ 
ronments.  An  overview  of  SNA  and  a 
comparison  with  TCP/IP  provide  a 
foundation  for  the  novice.  Experi¬ 
enced  net  professionals  and  SNA  spe¬ 
cialists  can  learn  more  about  hier¬ 
archical  SNA  3270  SDLC,  SNA  APPN 
high-performance  routing,  SNA  TCP/ 


IP  interconnections,  how  to  extend  SNA  via  frame  relay 
and  ATM,  and  how  SNA  works  with  integrated 
LAN/WAN  switching  and  wireless  networks. 

Novell’s  Guideto  IntranetWare  Networks 

Jeffrey  F.  Hughes  and  Blair  W.  Thomas  (Sanjose, 

Calif.,  Novell  Press,  IDG  Books  Worldwide)  1,079  pp., 
$59.99.  Phone:  (800)  762-2974;  ISBN:  0-7645-4516-7. 

Novell,  Inc.  recently  released  an  intranet  server 
package  that  pivots  on  Novell  Directory  Services  (NDS) 
and  includes  NetWare  4.11,  Novell  Web  Server  2.5, 
IP/IPX  gateway  and  FTP  services.  This  book  carries  you 
through  die  design,  implementation  and  maintenance 
of  IntranetWare,  as  well  as  NDS  tree  design  and  migra¬ 
tion  strategies.  Appendixes  discuss  NDS  error  codes, 
server  console  commands  and  diagnostic  tools. 


Network  World  •  January  27, 1997  •  www.nwfusion.com  •  53 


WAL-MART,  the  nation's  leading 
retailer  and  a  winner  of  Computerworld’s 
Best  Places  to  Work  currently  operates 
over  2,000  stores  in  the  U.S.  and 
international  trade  areas. 

Our  large  and  complex  network 
infrastructure  including  ATM,  Ethernet 
switching,  frame  relay  &  satellite 
switching,  is  a  strategic  corporate 
resource  that  drives  our  ability  as  a 
company  to  consistently  expand  while 
improving  customer  service.  We  provide 
tremendous  opportunity  for  Information 
Systems  professionals  at  all  levels  that 
are  seeking  stable  career 
opportunities  in  a  high 
energy,  challenging 
environment. 


COMPUTERWOMO'S 

Best  Places 
to  Work  % 


All  positions  are  located  in  our  corporate  offices  in  Bentonville,  Arkansas, 
near  the  beautiful  Ozark  Mountains,  Beaver  Lake,  and  the  University  of 
Arkansas.  In  Northwest  Arkansas  you  will  discover  a  lifestyle  that 
combines  urban  amenities,  easy  commuting,  and  a  progressive 
atmosphere  while  retaining  the  flavor  of  small  town  living.  Arkansas  is  a 
wonderful  place  to  raise  a  family,  and  we  ought  to  know:  WAL*MART‘s 
corporate  family  is  one  of  the  biggest  and  best  in  the  nation. 


Your  opportunity  to  work  in  a  dynamic,  award-winning  Information 
Systems  Division  awaits  you.  Both  entry  level  and  experienced 
professionals  are  encouraged  to  apply  for  positions  in  Network 
Engineering,  UNIX  engineering,  mainframe  programming,  PC  worksta¬ 
tion  development  or  telecommunications.  Experience  with  Routers, 
Hubs,  ATM,  Switching,  TCP/IP,  SNA  and/or  WAN/CPE  is  a  plus. 


Come  and  join  the  people  that  make  a  difference.  We  offer 
competitive  salaries  and  benefits.  If  you  are  willing  to  begin  a  dynamic 
career  with  WAL*MART,  please  mail,  fax  or  e-mail  your 
resume  to: 

WAL*MART 

WAL*MART  Information  Systems  Division 
Attention:  Recruiting,  Dept.  ISD9050CW 
702  S.W.  8th  Street 
Bentonville,  AR  72716-9050 
Phone:  (501)  277-3801  Fax:(501)  273-6879 
E-mail:  resumix@wal-mart.com  eoe/m/f/d/v 


TECHNICAL  HIRING  EVENTS  FOR  EXPERIENCED  COMPUTER  PROFESSIONALS 


The  best  jdpsFThe  best  companies. 
The  best  single  day  you  could  ever 
spend  to  advance  your  career. 


NEW  YORK  CITY 
TUE.  FEB  4 

The  New  York  Sheraton 
7th  Avenue  /  53rd  St. 


Travel  directions  only: 
(212)  581-1000 


NEW  JERSEY 
MON.  FEB  10 

The  Woodbridge  Sheraton 


515  Route  1  South  *  Iselin,  NJ 


Travel  directions  only: 
(908)  634-3600 


PHILADELPHIA 
THUR.  FEB  6 

Pennsylvania  Convention  Ctr 
Philadelphia,  PA 


Travel  directions  only: 
(215)  418-4989 


The  following  companies  will  be 
hiring  at  one  or  more  of  the 
above  events,  9  a.m  -  5  p.m. 


CONNECTICUT 
WED.  MARCH  26 

The  Tara  Stamford 

2701  Summer  St  *  Stamford,  CT 

Travel  directions  only: 
(203)  359-1300 


IBM  Corporation  *  Oracle  Corp.  *  Merrill  Lynch  *  AT&T  *  American  International  Group  5  Prodigy  9  Prudential  3  Cisco  3  Allied  Signal  Guidance  Canon 
4  Bank  of  New  York  9  Bellcore  5  Lockheed  Martin  9  Thomson  Financial  Services  5  Sapient  Corporation  3  Bloomberg  L  P.  :  United  Parcel  Service  EDS 
Coopers  &  Lybrand  *  Alliance  Capital  *  MBNA  4  MTA/NYC  Transit  Authority  9  Publishers  Clearinghouse  3  Information  Builders  M.I.S.I .  ACR,  Inc.  : 
ADP  9  Advanced  Computing  *  Advanced  Solutions  3  Advanced  Technologies  Solutions  3  Aegis  Software  Aerotek  3  Alltell  Ajilon  Services  Inc. 
Amalgamated  Life  Insurance  9  Approach,  Inc.  *  IEEE  *  Arcus  Staffing  5  Asbury  Park  Press  3  BankLink  9  Beechwood  Data  Systems  9 
BFR  Systems  9  Summit  Bank  9  Computer  Generated  Solutions  9  CB  Technologies  9  Datacom  Technology  Group  9  EDP  Contract  Services  9  Comsys 
*  CAP  Gemini  America  9  ICON  9  Case  Technologies  9  Chase  Mellon  9  Chubb  Computer  Svcs  9  Computer  Aid,3  Claremont  Global  Systems  9 
The  Computer  Merchant 9  Comcast  Cellular  Communications  3  CompuCom  Systems  9  Computer  Managers  3  Computer  Methods  9  Computer  Sciences  Corp. 
9  Context  Integration  9  CSD  Of  America  9  Devon  Consulting  9  DIS  Research  Ltd.  9  DMR  Trecom  9  Donnelley  Enterprise  Solutions  9  Drexcel  9 
Girl  Scouts  Of  The  U.S.A  9  FIRM  Resources  Inc.  9  LANOP  9  Link  Point 9  IMI  Systems  9  Infoworks  9  ILX  Systems  9 Jupiter  Data  3  Meridian  Integration  3 
Indotronlx  *INTERA  9  Integrated  Systems  Consulting  Group  9  Inovative  Consulting  9  International  Network  Services  9  Keane,  Inc  9  Kenda  Systems/Dux  Intnl. 
9  Maxima  9  Micro  Warehouse  9  Mobile  Computing  Solutions  9  The  Molloy  Group  9  Nab  Construction  9  NESCO  9  Omnicomp  9  Productivity  Point  3 
New  Technology  Partners  9  Opcenter 9  Pierce  Technologies  9  Princeton  Financial  Systems  3  Prolifics/JYACC  9  PRT  Group  3  RCG  Information  Technology  3 
Structured  Logic  9  Realtech  9RIA  9  RIS  Information  Services,  Inc.  9  RMS  Computer  Consultants  9  Robert  Half  International  3  Rohn  Rogers  Assoc. 
9  Setford  Shaw  Najarian  9  Soft,  Inc.  9  Software  Design  Concepts  9  Source  One  Personnel  *Spectrum  Technology  Group  9  TACT  9  J.  Anthony  9  Texcel  9 
Tech  Data  9  Smiths  Industries  9  Spectrum  Concepts  Consulting  9  Staflworks  3  Systems  Methodologies,  IncTSMI 9  Tad  Data  Services  9  Tan  Check.  MTS  3  Techno-Trac 
9  Tel  Tech,  Inc.  -Tiffany  Computer  Systems  9  Transaction  Info.  Sys  9  Triad  Data  9  Unixpros  9  Vanstar  Corp.  9  Volt  Services  Group  9  TSC  3  Tower  Perrin  9  &  more 
For  more  information  on  which  companies  are  at  specific  events,  visit  our  web  page  at:  http://www.tech-expo.com 


SYSTEMS 
SPECIALIST  WAN 

Motorola  Automotive  and  Industrial  Electronics 
Group  is  seeking  a  skilled  Systems  Specialist  to 
manage  the  operation  and  development  of  our  WAN 
and  support  the  LAN  infrastructure. 

Responsibilities  include  the  analysis,  evaluation  and 
installation  of  the  LAN/WAN,  policy/procedure 
development  and  enforcement,  troubleshooting  and 
documentation,  as  well  as  other  challenging  duties. 

The  ideal  candidate  will  have  6+  years  experience  in 
a  multi-protocol  environment  and  proven  skills 
utilizing  Cisco  routers,  Cabletron  lOBase-T  hubs, 
Ethernet,  FDDI  implementations  and  T1  leased  lines. 
Experience  with  Network  General  Sniffer  analysis 
tools  and  Cisco  certification  are  a  plus. 

In  return,  we  offer  a  competitive  salary  and  benefits 
package.  Please  forward  your  resume  to:  Motorola 
Automotive  and  Industrial  Electronics 
Group,  Staffing  Department-THl,  4000 
Commercial  Avenue,  Northbrook,  IL 
60062.  Fax:  847-205-3393.  E-mail: 
G13086@email.mot.com  EOE 

(k£\  MOTOROLA 

Automotive  &  Industrial 
Electronics  Group 


For  More  Information 
on  Advertising 
in  Networking  Careers 

Contact  Pam  Valentinas 

1-800-622-1108 


I  OPEN  POSITIONS:  Programmers  Senior  &  Junior  Levels,  Analysts,  Developers,  Architects,  Financial  &  Systems  Analysts,  Modelers,  DBA's,  Project  I 
Managers/Leaders,  Sys  Admins,  Teleoom,  Sybase  DBAs,  Process  Re-Engrs  &  Integrators,  All  Systems  Enginrs  All  Tech  Support,  Internet  Security,  HelpOesk.E 
Testers,  TechWriters,  Telecom  wiring  specialists,  CNE's,  LANAA/AN  &  Satellite  Techs,  ASIC  &  Power  supply  Engnrs  Experts  &  more!  All  SOFTWARE  I 
APPLICATIONS  AND  0/S  SQL,  Oracle,  Sybase,  SQL  Server,  Lotus  Notes,  C,  C++.  Gupta,  Powerbuilder,  Smalltalk,  Visual  Basic,  GUI,  UNIX,  Motif,  I 
MUMPS,  SAS,  OS/2,  PeopleSoft,  CASE,  SDK,  OLE,  MFC,  Oracle  Financials,  Access,  Informix,  IMRS,  DBS,  Paradox,  Dynasty,  FoxPro,  Filemaker,  0B2.I 
MVS,  Adabas/Natural.  SAP  R3/R2,  ABAP4,  IDMS,  CICS,  IMS/DB/DC,  Forest  S, Trees,  Cobol  1  &2,  AIX,  Windows  NT,  Progress,  JD  Edwards,  Ingres,  I 
MSA,  EXCELL,  Uniface  TELON,  IEF.SDK,  CISCO,  Novell.  HP-UX,  ATM,  SQA  Robot,  Java,  HTML,  Groupwise,  Rogue  Waves,  DS1 ,  DS3,  Delphi,  S.  much| 


FREE  ADMISSION!  BRING  MANY  RESUMES!  For  Companies  wishing  to  exhibit  call:  (212)  505-1780 


DON’T  MISS  THESE  GREAT 
ADVERTISING  OPPORTUNITIES  IN 

FEBRUARY/MARCH 


SPECIAL  SPACE 

ISSUE  FEATURE  CLOSE 


2/10/97 

Service  and  Support  Survey;  Special  Focus:  Web-based  Groupware 

1/29/97 

2/17/97 

Bonus  Distribution  at  Networks  Expo,  Boston,  MA;  Internet  Expo,  San  Jose,  CA 

2/5/97 

IntraNet  Magazine 

Bonus  distribution  of  IntraNet  as  a  bind-in  of  Network  World 
at  Networks  Expo,  Boston  and  InterNet  Expo,  San  Jose. 

1000  issues  of  IntraNet  magazine  distributed  as  a  stand-alone 
at  InterNet  World,  Los  Angeles,  March  12-14 

1/21/97 

2/24/97 

Server  Review  Series;  Special  Focus:  Java  Application  Development  Tools 

2/12/97 

3/3/97 

Review:  Document  Conferencing  Software;  Special  Focus:  Cable  Modems 

2/19/97 

For  more  information  or  to  place  an  advertisement,  please  call  Pam  Valentinas  at  1-800-622-1108. 
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We’re  Racing 
Toward  The 
Future. 


Bell  Atlantic  Network  Integration  (BANI) 
stands  as  a  world-class  integrator  of  enterprise- 
wide  information  networks  with  the  reach  and 
resources  to  design,  plan,  implement,  manage, 
and  support  complex  solutions  through  the 
entire  Network  Lifecycle.  But  that  is  only  the 
beginning. 

We  are  racing  toward  the  future... with 
customer-driven  solutions  that  are  uncon¬ 
strained  by  product,  technology  or  vendor 
affiliations.. .blending  and  supporting  advanced 
technologies  from  multiple  manufacturers... 
serving  as  a  single-point-of-contact  for  all 
support  issues...  assisting  with  everything  from 
router  configuration  to  experimental  intero¬ 
perability  and  proof-of-concept  testing. 

Pioneering  ideas  gain  strength  in  our  Technical 
Research  Center  (TRC),  where  next-generation 
networking  is  clearly  taking  shape,  from  operat¬ 
ing  systems  to  ATM  switching  and  far  beyond. 
Our  Network  Operations  Center  (NOC)  provides 
critical  client  support  24  hours  a  day.  Our 
Managed  Network  Services  span  the  fullest 
range,  from  single  functions  (Help  Desk, 
infrastructure  support)  to  complete  enterprise¬ 
wide  network  operation.  Beyond  data  offerings, 
we  are  redefining  the  boundaries  of  interactive 
multimedia  solutions  and  Internet  services. 

Most  importantly,  along  with  our  worldwide 
technical  presence,  we  demonstrate  a  tradition 
of  hiring  and  developing  the  brightest  engineering, 
consulting,  and  marketing  personnel. 

That’s  where  you  come  in. 

We  currently  have  the  following  opportunities 
available  for  Network  Integration  knowledgeable 
professionals. 

MIS 

LAN  Specialists 

Responsible  for  the  management,  administration, 
operation  and  support  of  PC  and  local  area  net¬ 
work  hardware  and  system  software  of  deployed 
desktop  and  servers. 

Programmers 

Responsible  for  application  development  utilizing 
FoxPro,  Microsoft  SQL  Server,  C++,  MS  Visual  Basic. 


SUPPORT  SERVICES 

Customer  Service  Engineers 

Serve  in  an  advisory  role  within  the  entire  com¬ 
pany  to  resolve  complex  and  unique  customer 
technical  issues  and  systems  problems  concerning 
the  operation  of  internetworks  using  a  variety  of 
industry  leading  and  niche  vendor’s  equipment. 

Event  Coordinators 

Responsible  for  coordination  of  customer  occur¬ 
rences  or  incidents  on  a  customer’s  contracted 
equipment  or  network  that  results  in  a  notifica¬ 
tion  of  BANI’s  Technical  Assistance  Center. 

Network  Management 
Specialists 

Responsible  for  the  development  and  operations 
of  enterprise-wide  data  networks  based  on 
UNIX  and  Windows  NT  platforms. 

MARKETING 

Program  Managers 

Coordinate  with  Marketing  Communications 
the  development  of  brochures,  customer  presen¬ 
tations,  press  releases,  advertisements,  and  web 
content.  Develop  presentation  for  Sales  training 
which  provides  a  description  of  market  opportu¬ 
nity,  identifying  opportunities,  how  the  program 
addresses  customer’s  business  requirements, 
analysis  of  competitive  offerings,  and  identifying 
BAN  I’s  positioning. 

Field  Marketing  Managers 

Implement  intemal/extemal  Sales  Support  programs; 
coordinate  sales  training  and  seminar  attendance; 
and  provide  technical  sales  and  program  marketing 
support.  Responsibilities  include  evaluating 
released  programs  and  recommending  improve¬ 
ments.  Will  also  coordinate  the  distribution  of 
program  specific  information  (i.e.,  product/vendor 
release  information,  vendor  specific  research 
materials,  customer  presentations,  and  new 
program  specific  marketing  literature). 

FIELD  OPERATIONS 

Field  Engineers 

Install  and  configure  LAN  and  WAN  data 
communications  hardware  and  software  solutions 
for  our  customers. 


Field  Technicians 

Install  copper,  fiber,  and  coax  transport  systems. 

Project  Managers 

Overall  accountability  for  the  delivery  and 
management  of  large  products  including 
customer  satisfaction. 


Sales  Managers 

Handle  the  sales  of  BANI  information  technology, 
telecommunications  and/or  Wide  Area  Network 
Products  and  services  direct  to  large  business 
customers. 

PRESALES 

ENGINEERS 

Network  Engineers 

Design  and  engineer  enterprise-wide  LAN  and 
WAN  solutions  for  our  customers. 

If  unable  to  visit  us  in  person,  please  send  your 
resume  to:  Bell  Atlantic  Network  Integration, 
Inc.,  Human  Resources,  Attn:  1/27-NW,  52 
East  Swedesford  Road,  Frazer,  PA  19355, 

Fax:  (610)  993-8072,  E-mail:  jobs@bani.com 

Visit  our  Home  Page  on  the  Internet  at 

http://www.bani.com/ 

Bell  Atlantic  is  an  Affirmative  Action/ 

Equal  Opportunity  Employer. 


Visit  Us  At  Our 
Booth  #638 

Or  Attend  Our 
Hospitality  Suite 

Grand  Hyatt  Hotel, 
Washington,  DC 


@  Bell  Atlantic 

Network  Integration 

THE  HEARJ  OP  COMMUNICATION® 


Make  an  impact  right  away  with  General  Instrument  in  San 
Diego.  Gl  is  a  world  leader  in  developing  technology,  sys¬ 
tems  and  product  solutions  for  the  interactive  delivery  of 
video,  voice,  and  data.  We  are  the  first  and  only  supplier 

in  the  world  to  deliver  a  full  line  of  analog  and  digital  - 

systems  for  secure,  high-speed  bandwidth  networks  that 

provide  video,  telephony,  data  and  internet  services  to  homes  and  offices. 

If  you're  ready  to  take  the  ball  and  fly  with  it,  consider  these  current 
challenges  available  at  our  fast-moving  San  Diego  facilities: 


MANAGER,  NETWORK  INTEGRATION  &  SERVICES 

Reporting  to  Director  of  Marketing,  position  is  responsible  for 
developing/implementing  network  integration  and  planning.  Requires 
BSEE/CS  (MBA  preferred)  and  5-10  years  of  experience  in  telecommunica¬ 
tions/network  industry,  including  systems  integration,  project  planning,  pro¬ 
gram  management,  customer  support  and  general  management.  Travel 
required.  Consulting  background  a  plus.  (Code:  KSBNSNW) 

APPLICATION  ENGINEER 

Network  Design  &  System  Engineering 
(Philadelphia  Area) 

Position  provides  network  design  planning,  system  engineering  and  sales 
support.  Will  assist  customers  in  network  design  planning,  recruitment  defi¬ 
nition,  and  coordination  of  site  survey/preparation,  and  will  support  man¬ 
agers  with  customer  meetings,  product  presentations  and  RFP  response. 
Requires  BSEE/CS  and  5-7  years  of  experience  in  advanced  communica¬ 
tions  networking,  including  routing,  ISP  systems,  LAN/WANs,  and  client- 
server  systems.  Excellent  communication  skills  essential.  Travel  required. 
(Code:  KEZANW) 

NETWORK  DESIGN  AND  SYSTEM  ENGINEERING 

Provides  network  design  planning,  system  engineering  and  sales  support 
for  Gl’s  SURFboard™  line  of  advanced  cable  modem  and  Internet  products. 
Will  assist  customers  in  network  design  planning;  define  customer  require¬ 
ments;  coordinate  site  surveys/preparation;  and  support  account  managers 
with  customer  meetings,  product  presentations,  and  RFP  responses. 
Requires  BSEE/CS  and  5-7  years  of  experience  in  advanced  communica¬ 
tions  networking.  Knowledge  of  routing,  ISP  systems,  LAN/WANs,  and 
client-server  systems  essential.  Must  have  excellent  verbal  and  written 
communication  skills.  (Code:  KNDNW) 

General  Instrument  offers  competitive  salaries  and  benefits.  Please  send 
your  resume  with  salary  history/requirements,  indicating  Code,  to:  General 

Instrument,  Code: _ ,  6262  Lusk  Blvd.,  San  Diego,  CA  92121;  E-mail  in 

ASCII  Text  only:  sd_jobs@gi.com  Equal  Opportunity  Employer.  Principals 
Only,  Please. 


THE  BEARDSLEY  CROUP 

Specialists  in 

Internetworking  Recruiting 


WE  ARE  YOUR  SOURCE  FOR  JOBS! 


*  System  Engineering  *  Contract  Positions 

*  Network  Consulting  *  Network  Analyst 

*  SALES  Internetworking 

See  our  complete  listing  of  Jobs  at:  http://www.beardsleygroup.com 
or  contact  us  at:  Tel  203  944  0050/Fax  203  944  0052 
Email  jobs@beardsleygroup.com 


FAX  YOUR  COPY 

It's  easy  to  place  your  Recruitment  Ad  in  the  Networking  Careers  Section. 
Just  fax  your  copy  to  us  at  508-820-0607  and  we  will  typeset  it  for  you  at 
different  sizes  &  prices.  No  obligation  of  course. 

When  we  fax  it  back  to  you,  just  call  us  with  your  changes  and  suggestions. 
We  look  forward  to  working  with  you. 

TO  508-820-0607 


Your 

Ad 

Could 

Be 

Here 

For 


$612.50 


(less  if  you 
have  a  contract) 


(1  teleconimunicdtions  giant  that 

talks  to  all  the  right  people 


Product  Marketing  flduisers  •  Sr.  Marketing  Managers 
Sales  •  dentation  i  lest  •  Software  •  Hardware  •  S  RF  Engineers 
Sales  •  Finance  •  f.  Information  Systems  Professionals 
Detail  Recounts  Director  •  Field  technicians 

At  Nortel,  we’re  ahead  of  the  technology  curve.  As  a  leading  global  manufacturer  of  telecommunications  products, 
we  employ  professionals  who  are  involved  in  the  design,  manufacture  and  support  of  a  family  of  globally  renowned 
telecommunications  products.  Our  accomplishments  are  many  and  our  position  of  dominance  in  some  of  today’s 
hottest  technologies  means  we’re  here  to  talk  opportunities. 

How  do  we  stay  ahead  in  today’s  hottest  technologies?  We  meet  and  exchange  ideas  with  people  like  you.  Talented, 
creative  people  with  exceptional  skills  who  can  contribute  on  a  team  of  professionals  that  has  a  reputation  of  con¬ 
sistently  coming  up  with  the  big  ideas  —  day  in  and  day  out.  If  that  sounds  like  you  and  you  have  an  interest  in 
designing  how  people  communicate  in  the  future  then  be  sure  to  stop  by  our  booth  on  Tuesday,  February  4th 
&  Wednesday,  February  5th  to  find  out  more. 

If  you’re  not  able  to  meet  with  us  at  this  time,  but  want  to  apply,  fax  your  resume  to:  1-800-546-8092,  Attn:  Job  #  ENJ- 
VARY  Or  if  you  prefer  mail  to  Nortel,  US  Resourcing,  PO  Box  13010,  MS  407002,  Attn:  Job  #ENJVARY,  Research 
Triangle  Park,  NC  27709.  Nortel  is  an  Equal  Opportunity/ Affirmative  Action  Employer.  We  provide  a  smoke-free 
workplace.  Pre-employment  drug  screening  is  required. 


Uisit  us  on  the  web  at:  www.nortel.com 


NORTEL 

NORTHERN  TELECOM 


Technical  Editor  Il(Chinese) 
/Supervisor  Localization. 

Duties:  Supervise  eight  technical 
editors  in  Simplified  and  tradi¬ 
tional  Chinese  and  Korean. 
Review  for  Linguistic  quality  and 
technical  accuracy  product  docu¬ 
mentation  and  software  that  has 
been  translated  by  3rd  party 
translation  vendors.  Provide  lin¬ 
guistic  support  to  3rd  party  ven¬ 
dors  in  Taiwan  and  China.  Assist 
with  localization  of  software  to 
run  of  various  platforms  such  as 
Macintosh,  DOS,  Windows  and 
UNIX  platforms.  Develop  and 
maintain  terminology  databases 
in  Chinese.  Coordinate  terminol¬ 
ogy  research  and  dictionary 
approval  process.  Write  and 
maintain  style  guides  for  Chi¬ 
nese.  Provide  linguistic  project 
management  on  assigned  local¬ 
ization  projects.  Translate  docu¬ 
ments  as  needed  from  English  to 
Chinese  and  vice  versa.  Write  sta¬ 
tus  reports  for  projects  and  indi¬ 
vidual  work  assignments. 
Requirements:  B.S.  in  English, 
Chinese  or  Translation  related 
field.  1  years  of  Chinese  localiza¬ 
tion  experience.  Must  be  familiar 
with  NetWare,  Macintosh,  DOS, 
Windows  and  UNIX  platforms. 
Must  be  fluent  in  written  and 
spoken  Chinese. 

Salary:  $48,270.00/yn 
Send  resumes  to  JOB  SERVICE, 
ATTN:  Pat  Redington,  Job 
Order  #3060302.  140  East  300 
South,  SLC,  UT  841111. 


Design,  develop,  build.  Support  new  technology  development. 
Team  environment. 


Founded  in  1930,  Draper  is  one  of  the  nation’s  100  largest  engineering  firms 

dedicated  to  scientific  research,  development  and  education.  Current  priorities  fie  in  the  areas  of 
guidance,  navigation  and  control;  aircraft  and  communication  systems;  information,  automation  and 
decision  support  systems;  and  system  integration. 

Network  Support  Engineer  -  Support  1,000+  user  network.  Knowledge  of  and  ability  to 
configure,  install  and  maintain:  switching,  routing,  bridging,  ATM,  remote  access,  firewalls, 
TCP/IP  protocols,  Ethernet,  SNMP,  LanManager,  Appletalk,  AFP,  FDDI,  10BASE-T,  telnet, 
ftp,  SMTP,  POP,  HTTP,  NFS.  Windows  95,  NT,  MacOS,  UNIX. 

TesserAct  ]VHS  Programmer/Analyst  Technical  Staff  -  Define  requirements,  evaluate 
packaged  software,  develop  custom  software  solutions  including  support  to  financial  and 
administrative  functions.  DB2,  COBOL.  Assembler.  PL/1,  JCL,  MVS/TSO  and  TesserAct 
software  skills  or  equivalent  required. 

Software  Quality  Assurance  Engineer  -  Design,  develop,  plan,  lead,  analyze, 
write,  present  and  implement  software  quality  programs  in  a  SEI  CMM  and  MIL-STD-498 
environment. 

Modeling  and  Simulation  Engineers  -  Support  and  expand  Draper’s  software 
simulation  framework  on  SGI  workstations  using  C  under  IRIX  O/S.  Support  nardware-in-lhe-loop 
real-time  simulation  and  complex  6  degree-of-freedom  vehicle  systems. 

U.S.  Citizenship  required.  Draper  offers  outstanding  benefits  and  compensation,  including 
paid  higher  education.  Resumes  can  be  sent  via:  Email:  hr@draper.com  or  by  US  mail: 
Professional  Employment,  Draper  Laboratory,  555  Technology  Square,  MS  44, 
Cambridge,  MA  02139-3563.  Fax  (617)  258-1113.We  are  an  equal  opportunity  employer. 


Visit  our  web  site  for  information  on  additional  opportunities: 
http://www.draper.com 
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World  Class  Networking 


. unless  you're  the  one  that's 


When  it  comes  to  revolutionizing  ATM  technology,  General 
DataComm  is  clearly  leading  the  way.  We're  at  the  forefront  in 
providing  the  advanced  networking  solutions  needed  to  deliver 
seamless  multimedia  communications  without  geographic 
boundaries.  As  the  global  pacesetter  in  the  development  of  WAN 
and  telecommunications  products  that  integrate  high-speed  dial 
up  LAN  access,  internetworking  systems  and  ATM  technology,  our 
rapidly  growing  firm  offers  decisive  opportunities  for: 


MARKETING  •  Middlebury,  CT 

•  Associate  Vice  President,  Systems  &  Architectures 

•  Director,  Network  Management 

•  Product  Manager,  Integrated  NMS 

•  Product  Manager,  ATM  NMS 

•  Marketing  Manager,  Public  Network  Systems 

•  Marketing  Manager,  Enterprise  Network  Systems 

•  Director  Marketing,  ATM  International 

•  Product  Manager,  ATM  Access 

•  Product  Manager,  IP  Switching  (Middlebury  or  Boston) 

•  Director  Product  Management,  Carrier  Access 

•  Director  Advanced  Network  Access,  ANA  (North  America) 

•  Regional  Marketing  Manager,  ATM  (Chicago) 

•  Regional  Marketing  Manager,  ANA  (NYC,  Atlanta) 

•  Product  Manager,  OEM  Relationships 


ENGINEERING  •  Middlebury,  CT 

•  Sr.  S/W  Engineer,  ATM  Embedded  Systems 

•  Sr.  S/W  Engineer,  ATM  Network 
Management  Systems 

•  Sr.  Technician,  ATM  Development 

•  Section  Manager,  ATM  H/W  Development 

•  Principal  Engineer,  ATM  Traffic  Management 

•  Principal  Engineer,  ATM  Board  Level 

•  Principal  Engineer,  Signaling 

•  Engineering  Documentation  Specialist 

•  Sr.  Engineer  Test,  ATM  H/W 

•  Sr.  Compliance  Engineer,  Technical  Services 


•  EDA  Simulation  Engineer 

•  Mechanical  Engineer, 


Packaging  Backplanes 
Manager,  Technical  Publications 
Sr.  CAD  Designer 
Section  Manager,  HDSL  Products 
Sr.  S/W  Engineer,  Modems 
Sr.  H/W  Engineer,  Modems 
Sr.  Engineer  H/W  &  S/W,  Modems 


Group 


BOSTON  RESEARCH  CENTER  •  Marlborough,  MA. 

•  Sr.  S/W  Engineer,  ATM/IP  &  LAN 


INFORMATION  TECHNOLOGY  •  Middlebury,  CT 

•  Principal  Programmer  Analyst 

•  Manager,  Voice/Video 


FINANCE  •  Middlebury,  CT 

•  Cost  Accountant 

•  Financial  Analyst 


GDC  SERVICES  •  Naugatuck,  CT 

•  CCIE  Internetworking  Engineer 

•  Sr.  Systems  Engineer,  Tech  Support  ATM 

•  Sr.  Applications  Engineer 

•  Manager  Business  Development,  Services  Marketing 

•  Business  Marketing  Specialist  (Chicago) 

•  Sr.  Training  Specialist 

•  Sr.  Field  Engineers  (throughout  U.S.) 

•  Telemarketing  Superior/Representatives 


MANUFACTURING  •  Naugatuck,  CT 

•  Supervisor,  Shipping  &  Receiving 

•  Production  Engineer  For  Surface  Mount  Technology  (SMT) 

•  SMT  Technician 


General  DataComm,  Inc. 


U.S.  SALES  (Positions  located  Throughout  U.S.) 


Business  Systems  Sales  (bss) 

•  Regional  Vice  President,  West  (San  Francisco,  CA) 

•  District  Sales  Manager  (Alameda,  CA) 

•  Sr.  Account  Manager  (Boston,  MA;  St.  Louis,  MO) 

•  District  Engineering  Group  Leader  (Chicago,  IL;  Boston,  MA) 

•  Principal  Network  Engineer  (Middlebury,  CT;  NYC; 

Alameda,  CA;  Los  Angeles,  CA) 


U.S.  Telecom  Sales 


•  National  Account  Director-LUCENT  (Warren,  NJ) 

•  Director,  Bell  Atlantic/NYNEX 
(Pennsauken,  NJ/Washington,  D.C.) 

•  Major  Account  Manager  (Washington,  D.C;  Bell  Atlantic; 
Los  Angeles,  GTE) 

•  Principal  Network  Engineer  (Washington,  D.C.; 

Warren,  NJ;  Middlebury,  CT) 


National  Resellers  Division 


•  Sector  Manager  (West-  LA/SF) 


Federal  Systems  Group 

•  Federal  Account  Manager  (Falls  Church,  VA) 


As  a  key  member  of  our  revolutionary  organization,  you  will  enjoy 
a  very  competitive  compensation  package,  challenging  projects 
and  many  opportunities  to  continue  your  professional  develop¬ 
ment.  Call  (203)  574-1118,  Ext.  6908  to  schedule  an  appoint¬ 
ment  for  February  4,  5  or  6  at  the  Renaissance  Hotel  or  mail 
to:  GENERAL  DATACOMM,  Dept.  SNNW,  P.O.  Box  1299, 
Middlebury,  CT  06762-1299.  Fax:  (203)  598-7944.  E-mail: 
hr@gdc.com  An  equal  opportunity  employer. 


1 


Free  Product  Information 

To  receive  more  information  circle  the  reader  service 
numbers  of  products  that  interest  you. 

Send  this  coupon  to:  Network  World  P.O.  Box  5090, 
Pittsfield,  MA  01203  or  Fax  (413)  637-4343. 


Expires  4/28/97 
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"Manifest  simplicity, 

Embrace  change, 

Reduce  Network  downtime. 

The  Tao  of  the  Router 


The  SpanNet  Multiprotocol  Routers 

Versatile  routing  technology  need  not  be  complicated. 
That’s  why  we  designed  the  SpanNet  Multiprotocol 
Routers.  They  support  virtually  every 
standard  protocol  like  TCP/IP  and 
IPX  routing,  including  Frame  Relay 
access  to  the  Internet. 


SpanNet’s  modular  design 
integrates  CSU/DSU  technology  i 
for  DDS  or  Tl.  Upgrading  from  I 
DDS  to  Tl  or  adding  a  second  WAN  port  is  simple. 
Relax,  while  powerful  IP  and  SAP  filtering  provide 
effective  firewall  protection. 

A  higher  learning  experience  is  not  required  for 
installation.  SpanNet’s  menu-driven  terminal 
interface,  which  can  also  be  accessed  via  Telnet  or 
SNMP  makes  this  task  effortless. 

Seek  more  truths  about  the  SpanNet  Routers  and  our 
other  WAN  access  and  internetworking 
products.  Contact  us  today  at  any  of 
the  following  numbers. 


VISIT  US  AT  COMNIT'97  BOOTH  #2419 


Research 

Products  as  Solutions 


225  Executive  Drive,  Moorestown,  NJ  08057 
1-800-337-4374  609-273-6622  E-mail:  info@erinc.com  http://www.erinc.com 


Reader  Service  No.  225 
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Full  RMON  Support 
Integrates  with  HP  OpenView 
TCP/IP,  Telnet,  TFTP,  BOOTP 
WinSNMP/WinSock/DDE  APIs 
SNMP,  ICMP,  IPX  Polling 

Castle  Rack. 

Computing 


Node  Discovery 

Long  Term  Statistics/Thresholds 
Custom  Event  Actions/Forwarding 
Over  100  Device  Specific  GUIs 
MIB  Compiler/Browser 

408-366-6540 

Fax:  408-252-2379 


AIa  OCO 


Interoperability  Lab 


Network  Control  Cente 


Baseline  Analysis 

3Com's“Trar 


The  Best  View 

MAXNET  solutions  add  value  to  your  business  by 
combining  engineering  expertise  with  advanced 
technology  like 


Network  Design 


Project  Management 


Network  Monitoring 


24x7  Maintenance 


A  single  management  application  for  all  3Com 
networking  systems: 

•Easily  manage  VLANS  across  multiple 
switch  models 

•Efficiently  analyze  and  troubleshoot 
network  problems 

•Simplifies  viewing  and  monitoring  of 
ATM  based  networks  and  VLANS 


Seeing  the  Pr 


rmse  of  Enterprise 


Activate  the  power  of  enterpise  networking.  Join  MAXNET's 
on-line  technology  forum  at  www.maxnet.com 


3Com 


1  800  4-MAXNET 


I  Uhanceil 

netmynEj  S illinium 
liSllUtl  Partner 


MAXNET 


communication  systems,  inc. 
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1 00  Mbps  Fast  Ethernet  and  Ethernet  Switches 


Special  Promotional  Bundle 


Intel  WorkGroup  Solution 

Express  WorkGroup  Switching  Hub  Bundle  gives 
servers  dedicated  1 00Mbps  bandwidth,  moving 
clients  to  1 00Mbps  with  Intel  Hubs  and  Adapters, 
and  a  downlink  module  to  connect  to  existing 
1 0Mbps  LANs.  The  WorkGroup  Solution  includes: 

One  Intel  Switching  Hub  (ESI  00TX) 

Three  Intel  Twelve-Port  Stackable  Hub  (EC100TX) 

Thirty  Intel  10/100  32-Bit  PCI  Adapters  (PIIA8465B) 
Two-Port  10/100  Downlink  Module  (EC100DL) 

Cost  for  Bundle  . $  1  0, 1  95  (Expires  1  /31  /971 


10/100  Ethernet  Switches 


INTEL 

Express  Switching  Hub,  Five  Switched 
1  OOBase-TX  Ports,  Plus  Two  Slots  for  1 00Mbps  TX/FX 
(ES100TX) . $3,100 


Two-Port  10/100  Downlink  Module  for  10Mbps  LAN 


Connectivity  (EC  1 00DL) . $725 

NBase 

MegaSwitch  II  10/100  Auto-Sensing  Eight-Port 
Switch  Plus  Two  Slots  for  1  OOBase 
TX/FX/ATM/GigaBit  Modules  (NH201 2)  . $6,495 


BAY  NETWORKS 
Bay  Network  Lattis  Switch  System 
Fast  Ethernet  Switching  Hubs 

10/100  Mbps  UTP  Switch,  1 6  RJ45  Supports 
10/100  Mbps  Ethernet,  Mode  (28115)  . $6,435 


1 00Mbps  Fiber  Optic  Switching  Hub 


(28104)  . $13,080 

NBASE 

MegaSwitch  1 00  FO 

Five  100Base-FX  Ports  (NH2007FO) . $5,100 


Special  WorkGroup  Switch  Bundle 

This  Bundle  gives  you  Four  (4)  1 00Mbps  switched 
ports  for  servers  and  bandwidth  hungry  clients,  plus 
Six  (6)  1 0Mbps  switched  ports  for  Ethernet  segment 
and  an  option  of  adding  Two  more  IX  or  FX  Port 
Modules.  NBase  WorkGroup  Bundle  includes: 

One  MegaSwitch  1 00  with  Five  1  OOBase-TX 
Ports  (NH2007)  and  a  Six-Port  1  OBase-T 
MegaSwitch  RJ45/AUI  with  One  1  OOBase-TX  Port 
(NH208+ 1 MP)  includes  SNMP  Managenment  and 
Flow  Control  . $6,200 


CISCO  SYSTEMS 

PROStack  EtherSwitch  Stackable  Ethernet  Switch, 
Sixteen  RJ45,Two  Expansion  Slots  for  High-Speed 


Modules,  1  OOBase-TX/ATM  (CPW1601A)  . $3,790 

(CPW1601B) . $4,425 

100Base-T  module  for  PRO  16,1  RJ45 

(CPW100T) . $972 

EtherSwitch  1 200,  Twenty-Five  1  OBase-T  Ports, 

Two  100Base-TX, IK  MAC  (CPW1200)  . $3,695 

EtherSwitch  1 400,  Twenty-Five  1  OBase-T, 

Two  Slots  8K  MAC  (CPW1402) . $5,665 

One-Port  100Base-TX  Module  (CPW141 1-X) . $686 

Eight-Port  100BaseTX  Module  (CPW1418-X)  ..$1,695 

Twelve-Port  1 0/1 00  Auto-Sensing  Ports 

Plus  Two  Fixed  1 00TX  Ports  (CPW2201 )  . $1 2,450 


D-Link 


Five-Port  10/100  FlexSwitch  With  Five  10/100 


PCI  Adapters  (DES  3205) . $2,100 

ProFast  Switch  Four  1 0Mbps  Ports  Plus  One 

100Base-TX  Port(DES  2205) . $890 

3COM 

LlnkSwItch  1 000,  Twenty-Four  Switched 
1 0Mbps  Port,  One  1 00  Base-TX  Fast  Port 

(3C16900)  . $3,135 

LinkSwitch  1 000,  Twelve  Switched  1 0Mbps  Ports, 

One  100Base-TX  Fast  Port(3C  16901)  . $2,505 


LinkSwitch  3000,  Five  Switched  Fiber  SC 
1  OOBase-FX  Ports,  One  Switched  copper 

100Base-TX  Port  (3C 16940)  . $7,525 

LinkSwitch  3000,  Eight  Switched 

100Base-TX  Ports  (3C16941) . $5,575 

ASANTE 

Fast  1 0/1 00  Bridge,  Integrate  1 00Mbps  Fast 

Ethernet  to  Existing  10Mbps  Ethernet . $799 

Ready  Switch  Four  1  OBase-T  Ports,  One  1  OOBase-TX 
Port  with  SNMP  . $2,049 


bps  Fast  Ethernet  Adapters 


INTEL 


Ether  Express  10/100  PCI  (PILA8465B) 

Single/5PK/20PK . $1 10/530/1,850 

Ether  Express  PRO/1 00  32-bit  EISA  (EILA8265) . $235 

Ether  Express  1 0/1 00  ISA  Adapter 
(PCLA8560)Single/5PK/20PK . $  1 59/825/2,895 


Intel  Smart  1 00  Nitro  High  Performance  Server 


Adapter(PILA8485) . $715 

3COM 

10/100  PCI  (3C905TX) 

Single/5PK . $135/630/2395 

10/100  EISA  (3C597-TX)Single/5PK . $251/1,228 

COGENT 

PCI  Quartel.Full  Duplex, 4RJ45  Ports  (EM400)  ....$1,137 

10/100  PCI  (EM110TX) . $190 

10/100  PCI  (EM440) . $1,170 

10/100  ISA  (EMI  10TX)  Single/5PK . $195/924 

D-Link 

Pro-Fast  10/100  PCI  Adapter  (DFE500TX) . $99 

SMC 

10/100  EISA  (SMC9232DST) . $240 

10/100  PCI  (SMC9332DST) . $69/320/1,200 

ASANTE 


10/100  PCI  Adapter  for  PC  and  MAC . $187 


COGENT 


PCI-SC  Connector  (EMI 00) . $499 

PCI-ST  Connector  (EM100FX) . $499 

Eight-Port  Fast  FX  Hub  (S-800) . $3,285 


FDDI  Adapters 


NETWORK  PERIPHERAL 


SAS  PCI  Singlemode  (NP-PCI-S50) . $599 

SAS  PCI  Multimode  (NP-PCI-S10) . $995 

DAS  PCI  Multimode  (NP-PCI-D10) . $1,360 


100  Base-TX  Fast  Ethernet  Hubs 


INTEL 

Express  Stackable  Hub,  Twelve  1  OOBase-TX  Ports 
Stackable  up  to  Six  Units  (EC1 00TX)  . $1 .450 


Hub  Bundle  with  Ten  Adapters  (PILA8465B)  ,...$2,467 

NBASE 

1  OOBase-TX  Eight-Port  Hub  (NH 1 08)  . $1,100 

Hub  Bundle  NBase  (NH108)  and  Five  Intel 
Adapters  (PILA8465B) . $1,295 


1  OOBase-TX  Twelve-Port  Stackable  Hub 

(NH  1012) . $1,425 

D-LINK 

1 00  Base-TX  Twelve-Port  Hub  (DFE-81 2TX) $1 ,342 

Eight-Port  100Base-TX  Hub  (DFE808TX)  . $565 

ASANTE 

1 00  Base-TX  Twelve-Port  Stackable  Hub . $1 ,545 

BAY  NETWORKS 

Twelve-Port  100Mbps  Hub  (AT2202-001)  .  $1 ,260 
Hub  Bundle  with  1 00Mbps  Hub  (AT2202-001 ) 
with  Ten  Intel  Adapters  (PILA8465B) . $2,265 

3COM 


100Base-TX  12-Bort  Stackable  Hub  (3C250-W1)  ....$1,725 


100Base-T4 


Fast  Ethernet  with  CAT  3  UTP  Support 


COGENT 

10/100  PCI  (EM110T4) . $190 

1 2-Port  Stackable  T4  Hub  (S-l  200) . $1 ,590 


100Mbps  Macintosh 


FARALLON 

Fast  Ether  TX-10/100  NuBus  (PN990)  . $328 

Fast  Ether  TX-10/100  PCI  (PN994) . $240 

ASANTE 

Fast  10/100  NuBus(99-00-364-00) . $299 

ATM 

Efficient  Networks 

1 55.52Mbps  PCI  ATM  Adapter  with  51 2K  Memory 

(ENI-1 55P-MF-C) . $1,200 

NBASE 

Multimode  to  Singlemode  ATM  Converter,  20KM 
Single  Link  (Node  Attach)  (N420ATMI) . $3,995 


Fibre  Channel  -  The  ATM  Alternative 


ANCOR  COMMUNICATIONS 

Gigabit  Fibre  Channel,  1 ,0625  Gigabaud  per  Channel, 

Sixteen-Port  FCS 1062  Fibre  Switch . $46,797 

FCS1 062  PO  Adapter . $3,273 

E  Ihemet  FDDI,  Token  Rng  LAN  Interface  Moddes  Avdctle 


Internet  &  Remote  LAN  Access  Products 


ADTRAN 

T1  DSU/CSU,  V,35  Dte  Nl-24,  T1  and 

Fractional,  B8ZS/AMI,  SF/ESF  Framing  . $1,390 

TSU-T1.1200-.060  LI  Data  Channel  DSU/CSU..  . $995 


ASCEND 

PipeLine  25-FX  Four  Users,  POTS,  ISDN  Bridge,  IP/IPX 


Routing,  Compression,  Built-in  NT1 

(1UBRI-RTR-C)  . $1,095 

PipeLine  75  Unlit-Users,  POTS,  ISDN  Bridge,  IP/IPX 

Routing,  Compression,  Built-in  NT1 

(1UBRI-ASD-D)  . $1,195 


BAY  NETWORKS 

BayStack  Access  Node  (AN)  Router,  Ethernet,  Two 
Synchronous  Ports,  IP  Access  Suite, 
Quick2Config,Ver,l  .1 ,  Router  Config.  Utiliity  ..$1,995 
BayStack  Access  Node  Hub  (ANH)  Eight-Port 
Ethernet  Hub,  Two  Synchronous  Ports, 

IP  Access  Suite,  Qulck2Config.Ver.  1.1,  Router 

Config.s  Utility . $2,235 

3COM 

NetBuilder  Remote  Office  422,  ISDN  Access 

Super  Stack  Router,  IP  and  IPX  (3C8422) . $2,699 

ACC  SYSTEMS 

Nile  Branch  Office  Bridge/Router  with  IP/IPX, 
AppleTalk,  One  RJ45  LAN  Port,  One  ISDN 

BRI,  One  V.35  Port . $2,445 

BAT 

SU  56K  DDS,  Point  to  Point  or  Multipoint, 

DSU/CSU, V.35  InterFace.  Front  Panel  LEDs . . $425 

CISCO  SYSTEMS 

2501 -IP  Router,  One  Ether  Port,  Two  Serial 

Ports,  Dial  on  Demand . Call  For  Prices 

2503-ISDN  IP  Router,  One  Ether  Port,  Two 

Serial  Ports,  ISDN  BRI  Demand  . Call  For  Prices 

2514-1  IP  One  Serial  Router,  Dual  Ethernet  Ports, 

Dual  Synchronious  Serial  Ports,  Auxilary  Analog 
Serial  Ports . Call  For  Prices 


Ethernet  Network  Adapters 


WEST  HILLS 

ISA  BNC  (ENET16C)  . $32 

ISARJ45  (ENET16T) . $30 


ISA  RJ45/BNC  (ENET16CT)  . $32 

RJ45/BNC/AUI  (HT2100PCI+PCI) . $60 

RJ45/BNC/AUI  (HT2100VL  VLB)  . $60 


For  SMC, 3Com,  end  Intel  Ethernet  Adopters  -Please  Cd  For  Pnces 


Hubs 


WEST  HILLS 

Eight-Port  10BT  Hub,  BNC  &  AUI  Ports 

(HT08TP)  . $89 

Sixteen-Port  10BT  Hub,  BNC  &  AUI  Ports 

(HT16TP) . $178 

Thirty  Two-Port  1  OBase-T  Hub  BNC/AUI  (HT832TP)$356 


Sixteen-Port  1 0BT  Smart  Hub,  AUI  Ports 

(UE204T )  . $290 


Sixteen-Port  1 0BT  Smart  Hub,  AUI  Ports 

(UE204T )  . $290 


Transceivers 


AUI  to  TP  . $30 

AUI  to  BNC . $30 

AUI  to  1  OBase-FL . $249 

AUI  to  MultiMode  Fiber  (1300nm,5Km) . $449 

AUI  to  SlngleMode  Fiber  (1300nm,10Km) . $549 


Fast  Ethernet  Guide 


Switched  and  Fast  Ethernet,  How  It  Works  and  How 


to  Use  It,  The  Only  Book  Dedicated  to  The  Latest  in 


Ethernet  Networking  Technology . $39 

Receive  Your  Free  Copy  With  The  Purchase 
Of  Any  Switch  or  1 00Mbps  Hub 


Visa/MasterCard/Discover/American  Express  •  Fast  Delivery  •  Most  Orders  Ship  The  Same  Day  ♦  Prices  Subject  To  Change  Without  Notice 


North  Hills  •  Golcom  •  NBase  Switch 


TIASAWE 


Bay  Networks 


We»T  HILLS 
LAN  lYITtUf 


7949  Woodley  Avenue.  Van  Nuys,  CA  91 406 

1-800-FOR-LANS 

1-800-367-5267 

Technical  Support:  818-773-8171  •  Fax:  1-818-773-8932 


in  tel  ciscopro 


Reader  Service  No.  297 


. 


TECHNICAL  SEMINARS 


lementln 


I 


I 


“Frame  relay  has 
quickly  become  the 
foundation  for  many  corporate 
WANs,  offering  significant  cost 
savings  and  flexibility.  But  building 
and  managing  a  frame  relay 
network  requires  new  skills 
and  expertise.” 

John  Gallant, 
Editor-in-Chief 
Network  World 


It1* 


Strategies  and  Solutions 


Frame  relay  offers  companies  the  chance  to  increase  network  performance  while 
decreasing  their  costs  of  operations.  As  a  result,  frame  relay  has  become  the 
fastest  growing  data  service  in  the  industry  and  is  only  matched  by  the  growth 
rate  of  the  Internet.  Since  its  introduction  nearly  five  years  ago,  thousands  of 
companies  have  chosen  frame  relay  to  give  them  efficient  and  effective  wide 
area  communications. 

Implementing  Frame  Relay:  Strategies  and  Solutions  will  help  you  decide  whether 
frame  relay  is  the  right  service  for  your  company,  and  you  will  learn  what  benefits 
you  can  expect  from  implementing  a  frame  relay  network.  In  addition,  this  seminar, 
taught  by  Tom  Jenkins  of  TeleChoice,  Inc.,  a  frame  relay  expert,  will  explore  which 
applications  perform  well  on  a  frame  relay  network  and  which  carriers  you  need  to 
consider  in  your  evaluation  process. 

Even  if  you  have  already  implemented  a  frame  relay  network,  attending  this 
information-packed  one-day  seminar  will  teach  you  the  new  features  and  services 
available  in  the  market  and  how  they  can  benefit  your  company. 

Whether  you  are  a  network/telecom  planner,  manager,  designer  or  administrator, 
Implementing  Frame  Relay:  Strategies  and  Solutions  will  provide  you  with  the 
information  and  insight  necessary  to  more  efficiently  and  effectively  implement 
and  manage  your  network. 


1  997  LOCATIONS  AND  DATES 


Boston,  MA 

Feb.  25 

Denver,  CO 

Mar.  19 

New  York,  NY 

Feb.  26 

Atlanta,  GA 

Apr.  1 

Irvine,  CA 

Mar.  4 

Dallas,  TX 

Apr.  2 

Son  Francisco,  CA 

Mar.  5 

Washington,  DC 

Apr.  15 

Chicago,  IL 

Mar.  18 

Philadelphia,  PA 

Apr.  16 

1 2  Key  Benefits  of  Attending  .  .  . 


1.  Explore  the  inherent  benefits  of  using  frame  relay 

2.  Learn  when  frame  relay  is  a  more  economical  solution  than  other  service  options 

3.  Understand  the  limitations  and  benefits  of  using  NNIs 

4.  Discover  which  frame  relay  service  features  are  significant  and  which  are 
merely  hype 

5.  Gain  an  understanding  of  the  direction  of  the  frame  relay  market 

6.  Analyze  the  differences  between  major  U.S.  frame  relay  providers 

7.  Learn  how  to  save  money  by  consolidating  your  voice  and  data  applications  over 
frame  relay 

8.  Understand  the  alternative  approaches  to  running  SNA  applications  over  frame  relay 

9.  Learn  how  pricing  structures  differ  among  carriers  and  how  you  can  take  advantage 
of  these  differences  to  obtain  the  best  service  bargain 

10.  Analyze  case  studies  of  various  network  types  to  see  how  frame  relay  can  be  best 
implemented 

11.  Learn  about  new  and  likely  future  service  enhancements  which  could  impact 
your  network 

12.  Examine  your  existing  carrier  and  services  features  to  see  if  they  are  best  suited  for 
your  current  and  future  network  requirements 


REGISTER  AND  YOU  WILL  RECEIVE  .  . 


•  Comprehensive  seminar  workbook 
®  Exclusive  Network  World  Frame  Relay  Resource  CD-ROM 
«  Luncheon  and  break  refreshments 
«  All  of  the  above  included  in  your  $450  registration  fee 


§ 


If  you  are  interested  in  sponsorship  opportunities,  please  call  508/820-7520. 


Note:  If  you  can't  attend,  call  us  and  order  this  informative 
and  useful  attendee  materials  kit  for  just  $99.95! 


Dial  Our 


FAX-BACK 


Information  Line  at 


1  -800-756-9430 

for  a  complete  seminar 
outline  and  registration  form. 
When  prompted,  request  document  #40. 


call  1  -800-643-4668 

Register  today  for 
the  seminar  nearest  you! 


Web/E-Mail 


Information 


Obtain  full  seminar  information  and  register  on-line  in  the 
Professional  Development  section  on  our  Web  site  at 

www.nwfusion.com 

OR 

receive  full  seminar  information  via  e-mail  by  sending  a  request  to: 

seminars@nww.coni 

Please  put  the  word  "FRAME"  in  the  subject  field. 


ponsored  by: 


AT&T 


OxC/q 

°/o\° 

INTERMEDIA 

COMMUNICATIONS 


-'V 


MCI  ®  SNetlink  „  „ 


sync 


WinSNMP 


NetPlus® 
WinSNMP 
Developer  Kit 


ATTENTION 
SNMP 
Software 
Developers 


Hie  NetPlus  WinSNMP  Developer  Kit  is  for  you! 


The  lowest  priced,  “quick-start”  in  SNMP  application  development  centers  on 
the  high-performance,  low-overhead  NetPlus  WinSNMP/Manager  DLL  and 
includes  complete  MSVC++  project  files  (with  source  code)  for  a  set  of  basic, 
SNMP  utility  applications.  The  Developer  Kit  gets  you  moving  quickly  and  in 
the  right  direction  on  your  SNMP  application  development  projects. 

♦  Shorten  your  SNMP  development  learning  curve 

♦  Reduce  your  application  development  time 

♦  Speed  your  product  time-to-market 

♦  Broaden  your  market  potential 
+  16  and  32-bit  versions  included 


New  Low  Price 


Includes  the  best  WinSNMP  DLL  on  the  market! 


NSmffCOMM 

phone:  (301 )  721  -3000  fax:  (301 )  258-5692 
lnfo@acecomm.com  http://www.acecomm.com 

Reader  Service  No.  223 


IT  DOCS  UNIX 


NetPlus^ 

wbkmw 

forklNJX 

Developer  Kit 


The  NetPlus  WinSNMP  Developer  Kit  is  for 

The  NetPlus  WinSNMP/UNIX  SDK  offers  you  the  quickest  and  easiest  start  to  your  SNMP 
software  development  projects  for  UNIX  platforms.  All  components  of  the  SDK  comply  with  the 
industry-standard  WinSNMP  API  specification  (v2).  This  SDK  includes  our  "best  of  breed” 
WinSNMP  implementation  (adapted  from  Win32  as  a  UNIX  shared  executable  library),  and 
associated  dependent,  make,  and  documentation  files,  in  addition  to  several  helpful  utility 
applications  and  a  full  set  of  sample  source  code  with  complete  C  language  project  files.  The 
NetPlus  WinSNMP/UNIX  implementation  interfaces  with  the  network  over  the  standard  UNIX 
sockets  library  through  a  virtual,  WinSock-like  API  for  UNIX.  This  non-blocking,  asynchronous 
interface  provides  network  stack  transparency  and  high  performance  operation  for  your 
applications.  Specify  platform  for  ship  date,  now  shipping  Solaris  2.5  version. 


+  Shorten  your  SNMP  development  learning  curve 
+  Reduce  your  application  development  time 
♦  Speed  your  product  time-to-market 
+  Broaden  your  market  potential 


New  Low 

•  Price 

•  $89920 

•  •  •  • 


Includes  the  best  UNIX  WinSNMP  Library  on  the  market! 

UDL  customers  call  for  special  discounts. 


phone:  (301)  721-3000  fax:  (301)  258-5692 
lnfo@acecomm.com  http://www.acecomm.com 


Reader  Service  No.  254 
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Do  You  Want . , . 

...to  increase  sales? 

...more  leads  and  qualified  buyers? 

...an  effective  advertising  campaign? 

...to  sell  your  products  and  services? 

Network  World’s  Marketplace  has  helped  many  new  and  established 
companies  accomplish  these  and  many  other  goals. 

Advertise  your  product  or  services  here  and  watch  your  company 
succeed.  Call  Direct  Response  Advertising  today 
at  1-800-622-1108  ext.507. 


Tr 


jfS 


INTERNET  SERVICE  PROVIDERS 
AND  WEB  HOSTS 


IBM  Internet  Connection 

New  York  Net 

(800)  455-5056  National 

(800)  806-NETS  NY/NJ/CT/PA/MA 

globalnetwork@info.ibm.com 

sales@new-york.net 

SLIP,  Leased  Lines 

SLIP,  PPP,  Leased  Lines,  Tls, 

Frame  Relay,  10Mbps,  DS3 

For  information  on  listing  your  service  here,  contact 
Enku  Gubaie  at  800-622-1108  x465,  egubaie@nww.com 


Easy  SNMP 


NetPlus  WinSNMP  User  Kit 


You  can  install  the  NetPlus  WinSNMP 
User  Kit  on  your  desktop  or  laptop  in  5 
minutes  and  immediately  begin 
Autodiscovery,  and  charting  network 
performance.  For  one  very  low  price,  you 
can  perform  95%  of  the  functions  of  the 
most  expensive  “platforms”  --  and  you 


nrrar!!rw 
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Ccmpied  MIBs 


CHASSIS  MIB 
ClSCO-MlB 
F1BERMUX  MIB 
LANtem-MIB 
NAT  MIB 
NC0-M1BT 

NOVELL-Mio 
FHnl 
RP6MS 

RETC-M  - 

RFCITi:  SoaceFfc 

RFCICTI  .  ■  - 


NetPlus® 
WinSNMP 
User  Kit 
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In  minutes  you  will  have: 

+  MIB  compiling 
+  Integrated  MIB  browsing 

♦  Real-time  charting 

♦  Autodiscovery 

♦  Network  polling 

+  and  more,  all  from  your 
desktop  or  laptop! 
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Incredibly  Low 
Introductory 
Price 


Win32  and  Win16  versions 
sold  separately 


Installed  and  operating  in  just  5  minutes! 


NBEllUOMM 

phone:  (301 )  721  -3000  fax:  (301 )  258-5692 
lnfo@acecomm.com  http://www.acecomm.com 

Reader  Service  No.  260 
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SHED  BUY  SELL  NEW  REFURBISHED  BUY  SELL 


ommunications 


Nationwide  Services  •  24-Hour  Technical  Support 
CME  Services  •  Trade-In  Credit 


WAN  Products 

Adtran 

AT&T  Paradyne 
BAT 

Digital  Link 
INC 
Micom 
NET 

Newbridge 

Vcrilink 


Distribution  Products 


Codex 

GDC 

IBM 

Micom 

Motorola 

Racal  Milgo 


Spectron 

Symplex 

Tellabs 

Timeplex 

UDS 

Vitalink 


Specialized  Products 


LAN  Products 

Bay  Networks 
Cisco 

Compression  Labs 

Cubix 

Develcon 

Livingston 

Madge 

Novell 

Xyplex 


Refurbished 

Cisco  Systems 

AGS+,  2500’s,  4000 ’s,  7000’s 


Data,  Voice  &  Video  Networking 
?  Waterloo  Road,  Stanhope,  NJ  07874 
TEL  201-347-3349  •  FAX  201-347-7176 
http://www.msic.com 


An  ES0P  Company . Where  the  Employees  are  Owners 

Circle  Reader  Service  No.  232 


LAISIf  WAN... NEW/USED 


I  3Com  HUGE  INVENTORY  3Com 


CABLETRON  SYNOPTICS  PROTEON 

CISCO  CHIPCOM  KALPANA  IBM  NOVELL  NETWORTH 


WE  BU  Y/SELL  NEWfUSEDlEXCESS  LANIWAN  STUFF!! 


TPO . $59 

COMBO . $79 

900  PCI* 

TP.$90  CBO  $110 

905TX* 

$115* 

•MINIMUM  QTY  -  3 

FMS1  DEALS! 

8  PORT . $135 

12  PORT . $250 

24  PORT . $675 

10  PORT  COAX  .$1125 
ADO  SNMP  FOR„.$275 

FMS2  DEALS! 

12  PORT . $450 

24  PORT . $775 

ADD  SNMP  FOR.. ,$475 

12  PORT . $2350 

24  PORT  W/TX  ..$2975 
10  PORT  W/OC3.  $3800 


NETWARE 


5  10  25  :  50  100 

S425  695  875  1195  1695 

LOTS  MORE  -  CALL 


3Com  (U) 


FMS  2  HUBS 

12  PORT . $350 

24  PORT . $650 

ADD  SNMP  FOR..4325 
FMS  *1  HUBS 

12  PORT . $250 

24  PORT . $550 

ADD  SNMP  FOR...S275 

NIC  ADAPTERS 

509TP/CX . $60 

503-16 . CALL 

501/503/505  . CALL 

MUCH  MORE  CALLII 

NETBUILDER 

2X2  ROUTER . $1250 

NETBUILDER2....CALL 

3GH..MSH.. 

PLEASE  CALLII 

LANPLEX 

2500 

ONE  P/S . $2800 

TWO  P/S . $3600 

MULTICONNECT-CALL! 

COMM  SERVER 

CS210 . $700 

CS2100 . $850 

CS2000 . CALL 

CS25/2500 . CALL! 

WE  RE  AUTHORIZED 
FOR  ALL  3COM!!! 


CABLETRON  (U)  I  MORE  NEW  3Com 


E2119 . $50 

THINMIM . $350 

FR3000 . $450 

TPRMIM22  ....$1200 

TPMIM24 . $995 

TPRMIN36 . $1400 

TPMIMTS . $350 

MT800 . $125 

TRX124 . $1200 

TRMIM-24 . $1200 

TRMIM44A  ....$1550 
MMAC3/5/8/CHASSIS 

MUCH  MORE  CALLII 


CHIPCOM  (U) 


6017C-A . $1800 

6017C-B . $2100 

6000PS . $475 

5108M-TP . $600 

5101NGT . $1200 

5104M-RB . $600 

5000MRCTL  ..$1200 


FAST  ETHERNET 

12  PORT . $1750 

FAST  SWITCH  ...$1500 

3303 A . $550 

3002PS . $450 

2715-04 . $1250 

2810 . $750 

3030 . $300 

3301  . $300 

3307 . $995 

3304ST . $1495 

3513 . $900 

2715B-05 . $1500 

2715SAF . $1800 

3/5/XXX  CHASSIS 
PLEASE  CALL!! 


TOKEN  RING  (U) 


IBM  8SS8..S95 
IBM  1614  ..SIOO 

PROTEON  16/4.. ..$85 
PROTEON  MAU  ..$90 
3COM  ROUTERS. .CALL 
3COM  12  PRT.$950 

MUCH  MORE  -  CALL! 


NEW  SMC 


12  PORT  TP  HUBS275 
MISC.  USED 

SMC  8  PRT  HUB  ...$90 
DATATLT1CSU  .  .$450 

NETWORTH . CALL 

VITALINK . CALL 

CX/TP  XNCVR . $40 


KALPANA  (U) 


EPS1500....S750 

EPP211 . $850 

EPS500....S1250 


COr'rtkirMUHO  IMA  47  Werman  Court  •  Plainview,  NY  1 1803 

C n O U IM U IVI I Lr  IIMLr.  Purch:  516-293-5200  •  FAX:  516-293-5325 


I 


WE  WARRANTY!  WE  BUY  YOUR  USED  LANS/WANS  QTY  DISCOUNTS!  B 


VISA/M  C/AMEX 
COD  &  Terms 


FOR  SALES  ONLY  CALL  TOLL  FREE  OUR  14TH  YEAR! 

800-AKA-3Com  (800-252-3266)  u=used 


Circle  Reader  Service  No.  271 


REFURBISHED  PRODUCTS 

NETWORKING 

ROUTERS  •  SWITCHES  •  HUBS 


CISCO,  CRBIITBON,  SYNOPTICS 


NEW!  NEW!  NEW! 


0?i6&idcf*te 

State  of  the  Art 
10  BASE  T  Ethernet 
RJ45-Fiber  Converter 
Model  FTX-R11  w/ST’s 
and  Model  FTX-R61  w/SC’s 


Qty  Unit  Price 


1-5 

$190.00 

FACTORY 

6-20 

$183.00 

DIRECT 

i  21  +  Call  (800)  894-9694 

SAVINGS 

*7kC. 

818  Park  Lane  Dr.,  Herkimer,  NY  13350 
www.fiberdyne.com 
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ROUTERS  •  DSU/CSU  •  HUBS 
TERMINAL  SERVERS  •  SWITCHES 


BUY/SEU/liASE 

CISCO* 


I  LIVINGSTON  •  ADTRAN  •  ADC/KENTROX  | 
1  BAY  NETWORKS » 3COM  *  CISCO 


H  Fax:  805-964-5649  E 


http;/ / www.networkhardware.tom 

Network  Hardware  Resale,  Inc. 

1800  Tm  Strawd  »  Hinwost  Buch,  C<  >0254 


Circle  Reader  Service  No.  244 


Syn  Optics 


g.  Bay  Networks 


caaeTRon  vXv 

sYsvems  Jyo 

NOVELL 


the  Complele  Neiworklng  Solution- 


Largest  Inventory  of  Refurbished  SynOptics  in  America! 

•  SynOptics  Trained  •  Proven  Track  Record 

•  SynOptics  Authorized  •  We  Stock  What  We  Sell! 

•  One  Year  Warranties  •  We  Buy  Used  Equipment  j|j||  =?====== 

WE  REPAIR  ALL  SYNOPTICS  Wellfleet  PfQteon 


National  LAN  Exchange 

800-243-LANS 

5  2  6  7 
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TELECOM  REFORM:  ONE  VERR  LATER 


Reform 

Continued  from  page  1 

Almost  everyone  but  the  local 
companies  themselves  agree 
that  the  RBOCs  and  their  com¬ 
bative  brethren  at  GTE  need  to 
go  lighter  on  the  legal  wrangling 
over  interconnecdon  of  their 
networks  with  new  competitors’. 
But  equally  important,  AT&T 
and  other  long-distance  carriers 
need  to  stop  waiting  for  the  day 
when  all  the  rules  favor  them  — 
since  that  day  may  never  come  — 
and  invest  more  heavily  in  their 
own  local  businesses. 

“AT&T  is  proceeding  with  an 
abundance  of  caution,”  says 
Reginald  Bernard,  assistant 
director  of  communications  sys¬ 
tems  for  State  Farm  Insurance 
Co.  in  Bloomington,  Ill.  “Their 
execution  is  exceedingly  slow.” 

AT&T  does  not  offer  facilities- 
based  local  services,  but  it  has 
begun  a  controlled  introduction 
of  local  residential  service  in  Sac¬ 
ramento,  Calif.,  and  will  soon 
introduce  resale  service  in  Con¬ 
necticut  and  Illinois,  says  Harry 
Bennett,  vice  president  and  gen¬ 
eral  manager  of  AT&T’s  local 
services  division. 

But  experts  suggest  users  not 
wait  for  a  long-distance  carrier  to 
camp  on  their  doorstep  with  a 
proposal  for  a  resold  local 
exchange  service.  Facilities- 


STILL  WAITING... 

Except  for  MCI,  big  long-distance  carriers’  claims  about  entering  local  markets 
have  not  come  close  to  reality. 


Carrier 

What  was  said 

When  it  was  said 

Where  it  stands 

AT&T 

Enter  all  50  states 
via  resale  as  soon 
as  summer  1996. 

February  1996 

Controlled  introduction 
of  residential  resale  in 
Sacramento,  Calif.* 

MCI 

- iV 

MO 

Enter  20  metro¬ 
politan  markets 
via  new  buildout 
within  two  years. 

January  1994 

Service  in  18  cities  for 
businesses  located  on 
a  fiber  ring 

Sprint 

Enter  25  new 
markets  via  tele¬ 
phony  conversion 
of  cable  facilities.** 

October  1994 

No  new  wireline 
markets  entered; 
wireless  service  in 
five  areas 

*  AT&T  local  service  is  also  available  in  Rochester,  N.Y.,  but  no  longer  actively  marketed. 

*  *  Sprint  already  owned  several  local  exchange  carriers  in  smaller  markets  around  the  country. 


based  local  carriers  such  as 
WorldCom,  Inc.,  which  recently 
bought  pioneering  competitive 
access  provider  MFS  Communi¬ 
cations  Company,  Inc.,  stand  a 
better  chance  of  serving  the 
needs  of  corporate  users,  experts 
say. 

Ultimately,  AT&T  hopes  to 
introduce  resale  services  in  as 
many  as  15  states  this  year,  Ben¬ 
nett  says. 

But  analysts  question  whether 
that  will  do  enterprise  network 
managers  any  good.  While  most 
large  companies  are  interested 
in  buying  end-to-end  services 


FCC  chief  looks  for  telecom  reform  payoff 

Reed  Hundt  is  a  frustrated  man. 

When  he  was  appointed  chairman  of  the  Federal  Com¬ 
munications  Commission  in  1993,  he  says,  “Everyone  told 
me  about  the  inevitable  and  imminent  convergence  in 
which  cable  would  provide  telephony  and  the  telephone  compa¬ 
nies  would  offer  cable  service.”  As  a  result, 
the  FCC  and  Congress  worked  to  write  the 
conditions  for  this  convergence  into  law. 

So  what  happened?  “As  of  now,  expecta¬ 
tions  for  a  full-front,  two-wire  war  are  not 
being  met,”  Hundtcomplains.  And  he  labels 
the  communications  landscape  “a stand-off 
in  which  incumbent  companies  warily 
eye  each  other  but  never  really  enter  each 
other’s  markets.” 

Washington  telecom  policy  veteran  Brian 
Moir  has  an  explanation  for  the  FCC  chair¬ 
man.  In  the  congressional  telecom  reform 
debate,  Moir  says,  cable  and  telephone  com¬ 
panies  argued  in  favor  of  opening  up  both 
markets  to  competition.  ‘  ‘  But  it  was  really  all 
a  fight  to  be  able  to  buy  each  other,  not  build 
against  each  other,”  Moir  says. 

In  the  last  House-Senate  conference  to  shape  the  Telecom¬ 
munications  Act  of  1 996,  Congress  decided  phone  and  cable  com¬ 
panies  could  compete  with  one  another  but  not  buy  one  another, 
in  most  metropolitan  areas.  Since  then,  big  cable  companies  have 
backed  away  from  telephony,  and  most  big  local  telephone  com¬ 
panies  have  scaled  back  their  video  plans.  And  the  carriers’  stated 
plans  to  barge  into  new  markets  on  their  own? 

‘  ‘We  knew  it  was  BS  all  along,  ’  ’  Moir  says. 

— David  Rohde 


The  FCC’s  Hundt  is  still 
ivaiting  for  a  battle. 


from  a  single  carrier,  that  sup¬ 
port  collapses  if  the  local 
exchange  line  is  merely  resold 
from  an  RBOC.  Only  12%  of  net¬ 
work  managers  at  large  compa¬ 
nies  said  they  would  agree  to 
such  an  arrangement,  according 
to  a  Forrester  Research  study. 

Making  its  presence  known 

Another  user  option  may  be 
looming  on  the  horizon.  With 
the  expectation  of  a  cash  infu¬ 
sion  from  proposed  merger  part¬ 
ner  British  Telecommunications 
pic,  MCI  Communications  Corp. 
is  forging  ahead  with  buildouts 
of  local  metropolitan  networks. 

Typically,  they  involve  down¬ 
town  Synchronous  Optical  Net¬ 
work  (SONET)  rings  and  a 
central  office-class  switch  from 
Siemens  AG  or  Northern  Tele¬ 
com,  Inc.,  with  T-l  tail  circuits  of 
up  to  20  miles  if  necessary  to 
reach  individual  buildings,  says 
Marc  Brown,  MCI’s  director  of 
local  service  marketing. 

The  result:  MCI,  unlike  its  two 
principal  long-distance  rivals,  is 
making  its  presence  felt  in  the 
nation’s  big  cities,  with 
service  launched  in  18  of 
them  and  more  to  come. 

“It’s  primarily  MFS  and 
MCI  you  see  written  in 
Day-Glo  paint  all  over 
the  pavement,”  says  Tim 
Stevens,  director  of 
advanced  access  services 
for  Bell  Atlantic  Corp. 

“When  you  see  MCI  on 
the  manhole  covers, 
they’ve  arrived.” 

Brown  compares 
MCI’s  decision  to  forge 
ahead  despite  court 
appeals  of  key  Federal 
Communications  Com¬ 
mission  decisions  with  a 
couple’s  decision  tostart 
a  family.  “If  you  wait  for 
the  perfect  time  to  get 
pregnant,  you’ll  never 


get  started,”  he  says. 

Indeed,  as  the  first  anniver¬ 
sary  of  1996’s  telecom  reform 
act  approaches,  many  potential 
competitors  are  expected  to 
point  to  the  lawsuit  filed  by  local 
carriers  to  stop  the  FCC’s  inter¬ 
connection  rules  as  the  principal 
reason  for  the  delay  in  wide¬ 
spread  competition. 

Surprisingly,  the  actual  deci¬ 
sion  rendered  by  the  court  may 
be  less  important  than  the  speed 
with  which  it  rules. 

Most  of  the  states  that  have 
completed  the  required  arbitra¬ 
tions  between  RBOCs  and  new 
entrants  have  set  pricing  in 
accordance  with  the  FCC  guide¬ 
lines  anyway. 

Among  the  big  carriers,  only 
MCI  will  commit  to  a  figure  for 
local  investment  this  year:  $700 
million.  Neither  AT&T  nor 
Sprint  Corp.  will  say  how  much 
they  are  spending  on  local  mar¬ 
ket  entry  this  year.  Part  of  the 
hesitation,  analysts  say,  is  that  a 
widespread  deployment  of  local 
service  would  help  the  RBOCs 
demonstrate  that  local  competi¬ 
tion  does  exist  —  a  necessary 
precondition  for  their  applica¬ 
tions  for  in-region,  long-distance 
entry,  Forrester’s  Goodtree  says. 

AT&T  officials  acknowledge 
that  telecom  reform  has  not  yet 
proven  to  be  all  it  was  cracked  up 
to  be.  “We’re  disappointed  that 
we  haven’t  made  more  progress 
in  terms  of  implementation,” 
AT&T’s  Bennett  says. 

But  even  then,  corporate 
users  believe  the  carrier  needs  to 
try  harder.  “They  think  they’ve 
made  more  progress  than  we 
think  they’ve  made,”  says  Ber¬ 
nard,  president  of  the  SDN  Users 
Association,  an  AT&T  user 
group.  “To  be  profitable,  they’ve 
got  to  be  able  to  address  at  least 
the  major  elements  with  a  facili- 
ties-based  strategy.”  ■ 


What  do  carriers  want? 


After  AT&T  requested  arbitration  of  interconnection 
agreements  with  dominant  local  carriers,  most 
states  ordered  a  resale  discount  for  business 


Think  of  resold 
phone  lines  as 
Version  1.0 


I 


f  your  primary  long-dis¬ 
tance  carrier  tells  you  it 
has  started  reselling  your 
local  telephone  compa¬ 
ny’s  phone  lines,  shouldyou 
switch  local  carriers? 

Not  unlessyou’re  also  the 
type  who  has  to  be  first  on  the 
block  to  install  ATM  LANs, 
desktop  video  and  other  cut- 
ting-edge  network  offerings, 
experts  warn. 

The  problem  is  local  carri¬ 
ers  and  their  new  resellers 
have  not  established  true 
electronic  links  between  their 
ordering  systems.  So  orders 
may  get  lost,  and  carriers  are 
likely  to  point  fingers  over  ser¬ 
vice  problems.  “A  combina¬ 
tion  of  system  and  human 
failures  could  result  in  service 
debacles,”  says  Joseph 
Kraemer,  a  principal  with 
EDS  Corp.’s  A.  T.  Kearney 
consulting  division. 

Since  the  local  carrier  and 
reseller  are  likely  to  be  long¬ 
time  telecommunications 
giants,  the  required  elec¬ 
tronic  interfaces  usually  have 
to  be  written  on  older  systems. 
“They’re  being  built  on  sys¬ 
tems  running  COBOL  and 
MVS,”  says  David  Goodtree, 
who  heads  the  Telecom 
Strategy  Service  for  Forrester 
Research,  Inc.  in  Cambridge, 
Mass.  “It’s  going  to  take  a 
long  time  until  those  systems 
are  up  to  snuff.” 

The  government  last  year 
told  all  the  regional  Bell  oper¬ 
ating  companies  to  give  resell¬ 
ers  electronic  access  to  their 
ordering  systems  byjan.  1. 

But  only  NYNEX  Corp.  and 
Ameritech  Corp.  came  close 
to  meeting  the  deadline.  And 
most  of  the  RBOCs  are  only 
prepared  to  take  the  system  so 
far.  “They  get  the  [reseller’s] 


services  within  or  exceeding  the  FCC’s 
17%  to  25%  range. 

suggested 

order  by  E-mail,  but  then  they 
print  it  out  and  walk  it  over  to 

State 

Dominant 
local  carrier 

Discount 

someone  else,”  he  says. 

NYNEX  gave  resellers  a 
Web-based  browser  interface, 

California 

Pacific  Bell 

17% 

but  MCI  Communications 

Connecticut 

Southern 

New  England 
Telephone 

40% 

Corp.  says  that  is  inadequate, 
claiming  NYNEX  does  not 
provide  access  to  an  online 

Illinois 

Ameritech 

22.04% 

table  of  maintenance  codes. 

Maryland 

Bell  Atlantic 

19.87% 

Experts  suggestyou  treat 
installation  of  resold  local 

Minnesota 

US  WEST 

21.5% 

exchange  lines  asyou  would 

Pennsylvania 

Bell  Atlantic 

25.71% 

migration  to  a  new  software 

SOURCES:  AT&T,  BASKING  RIDGE,  N.J.,  AND  STATE  PUBLIC  UTILITY 
COMMISSIONS 


package — with  caution. 

— David  Rohde 
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Cisco 

Continued  from  page  1 

the  U.S.,”  said  Rick  Malone, 
principal  of  Vertical  Systems 
Group  in  Dedham,  Mass.,  who 
claims  he’s  discussed  PBX 
opportunities  with  Cisco. 

“The  paradigm  has  changed 
significantly  over  the  past  couple 
of  years  such  that  it’s  a  LAN- 
driven  market  with  distributed 
processors  all  the  way  down  the 
path,”  he  added. 

Today,  Cisco  supports  voice 
on  its  StrataCom,  Inc.  IPX,  IGX 

NOW  HEAR  THIS 

Cisco's  voice  networking  rollout  plan 

-  Q1  '97  Dynamic  Network  Switching  for 
Intelligent  Network  Server  call  setup 
platform;  “Condor”  circuit  emulation  card 
forthe  LightStream  1010  ATM  switch 

*1  1 


1997 


and  BPX  WAN  switches,  and 
FastPAD  frame  relay  access 
devices. 

But  new  products  and  capa- 
bilides  for  routers,  ATM 
switches,  and  remote  access  gear 
could  emerge  later  this  quarter 
and  throughout  the  year,  sources 
said.  They  cautioned,  though, 
that  the  time  frame  may  still  be  in 
flux. 

Cisco  declined  to  comment 
on  product  rollouts. 

Expected  this  quarter  is 
advanced  signaling  software  for 
Cisco’s  call  setup  server.  The  soft- 


-  Q2  '97  “Alien”  circuit 
provisioning  card  for  the 
7200  router 


Future 


■  Internet  phone  and  fax 
gateway  (possibly 
from  OEM  partner) 


L  Midyear  “Rincon”  2nd  half '97  Voice  port  module 
ATM  concentrator  for  3600  access  server;  digital 
signal  processor  card  for 
AS5X00  access  server;  voice 
support  on  1000, 1600  and 
2500  Ethernet  routers 


ware,  called  Dynamic  Network 
Switching  (DNS),  runs  on  Cis¬ 
co’s  Intelligent  Network  Server 
and  provides  single-hop  call 
routing,  which  is  designed  to 
eliminate  WAN  backhauls  and 
trunks,  and  maximize  compres¬ 
sion  efficiency,  according  to 
sources. 

Cisco  is  also  expected  to 
unveil  a  circuit  emulation  card, 
code-named  Condor,  for  the 
LightStream  1010  campus  ATM 
switch. 

Condor  will  feature  digital 
cross-connect  Application  Spe¬ 
cific  Integrated  Circuits  that 
allow  the  switch  to  connect  PBXs 
and  eliminate  the  need  for  tan¬ 
dem  trunks,  sources  said. 

“We’re  in  the  midst  of  com¬ 
bining  our  telecom  and  datacom 
arms,”  said  Allen  Robel,  senior 
network  analyst  for  Indiana  Uni¬ 
versity’s  computer  services 
department  in  Bloomington. 
‘  ‘We  have  our  own  Northern  Tel¬ 
ecom  DMS-100  switches  here 
and  on  the  campus  in  Indianapo¬ 
lis.  Being  able  to  trunk  those 
together  over  our  existing  ATM 
backbone  seems  like  it  would  be 
a  win  for  us.” 

In  the  second  quarter,  Cisco  is 
looking  to  roll  out  a  port  adapter 


IS0C 

Continued  from  page  1 

ISOC  is  planning  to  trans¬ 
form  a  relatively  obscure  inter¬ 
nal  committee  into  a  broad 
coalition  that  will  tackle  such 
timely  and  thorny  issues  as  intel¬ 
lectual  property,  encryption  and 
censorship,  as  well  as  set  stan¬ 
dards  for  underlying  technology- 
issues,  according  to  Don  Heath, 
ISOC’s  president  and  chief  exec¬ 
utive  officer. 

The  Internet  International 
Ad  Hoc  Committee  (LAHC), 
which  was  formed  four  months 
ago  to  sort  out  Internet  Domain 
Naming  System  controversies,  is 
expected  to  gain  broader 
authority  after  wrapping  up  a 
report  on  the  naming  issue  at  the 
end  of  this  month. 

Such  a  move  would  send 
a  clear  signal  to  the  U.S.  govern¬ 
ment  and  others  abroad  that 
the  Internet  community  is  in¬ 
tent  on  coordinating  policy  and 
regulatory  debates  for  issues 
that  extend  beyond  national 
boundaries. 

“We’re  actually  going  to 
develop  a  process  where  we  can 
do  Internet  governance,”  Heath 
said.  “We  want  to  bring  in  people 
front  governments  around  the 
world  to  create  a  body  that  has 
policy-setting  capabilities.”  To 
that  end,  he  said,  ISOC  already 


has  courted  three  directorate 
generals  from  the  European 
Community. 

The  IAHC  likely  will  undergo 
a  name  change,  too,  perhaps  set- 
ding  on  the  International  Infra¬ 
structure  Policy  Committee, 
Heath  said. 

Currently,  the  IAHC  consists 
of  11  members,  including  repre¬ 
sentatives  from  the  International 
Telecommunication  Union,  the 
International  Trade¬ 
mark  Association,  the 
Internet  Mail  Consor¬ 
tium,  the  National  Sci¬ 
ence  Foundation,  the 
World  Intellectual 
Property  Organizadon, 
international  carriers 
and  patent  law  firms. 

Heath  serves  as  chair¬ 
man  of  the  group. 

One  goal,  Heath 
said,  is  to  enlist  addi¬ 
tional  support  from  U.S.  and  for¬ 
eign  governments,  and  from 
vendor  and  service  provider 
organizations  such  as  the  North 
American  Network  Operators 
Group  and  the  Commercial 
Internet  eXchange. 

Frontier  friends 

ISOC’s  self-governance  plan 
is  getting  the  thumbs-up  from 
such  organizations  as  the  Elec¬ 
tronic  Frontier  Foundation.  Lori 
Fena,  the  group’s  executive 


director,  views  the  IAHC  effort  as 
a  positive  step  but  questions 
whether  a  supergoverning  orga¬ 
nization  unattached  to  any  coun¬ 
try  can  gain  eminent  jurisdiction 
over  the  Internet. 

“I  tend  to  think  most  coun¬ 
tries  will  not  turn  over  communi¬ 
cations  law  because  the  Internet 
is  going  to  be  part  of  an  inte¬ 
grated  overall  communications 
network,”  she  said. 

The  success  of  the 
IAHC,  according  to 
Fena,  will  lie  in  forging 
ties  to  government 
bodies  and  working 
with  them  in  tandem. 

Of  greater  concern 
though,  is  whether  the 
IAHC  will  be  able  to 
court  such  organiza¬ 
tions  as  the  North 
American  Network 
Operators  Group  and 
the  Intercontinental  Engineer¬ 
ing  Planning  Group  —  both  ser¬ 
vice  providers. 

ISOC  is  an  association  of 
Internet  users,  said John  Curran, 
chief  technology  officer  at  BBN 
Communications,  an  Internet 
service  provider  in  Cambridge, 
Mass. 

The  coordination  of  the 
Internet  is  not  an  ISOC  initiative, 
and  it  is  up  to  providers  to  work 
out  operational  issues,  accord¬ 
ing  to  Curan.  ■ 


ISOC’s  Heath  wants 
to  bring  governments 
together. 


card  for  the  7200  series  router, 
code-named  Alien.  This  will  give 
the  7200  circuit  provisioning 
capabilities  for  transmitting 
voice  traffic  from  PBXs  across 
OC-3  ATM  metropolitan-area 
networks. 

Around  midyear,  Cisco  plans 
to  unveil  an  ATM  access  concen¬ 
trator,  code-named  Rincon,  that 
will  extend  circuit  switching, 
Ethernet,  frame  relay  and  video 
interfaces  to  the  customer  from 
a  carrier’s  ATM  network. 

In  the  second  half  of  1997, 
Cisco  is  looking  to  roll  out  a  port 


module  for  the  3600  series  dial¬ 
up  access  server  and  a  digital  sig¬ 
nal  processor  card  for  the 
AS5X00  access  server,  according 
to  sources.  These  products  will 
attach  the  access  servers  to  PBXs 
and  allow  users  to  carry  voice 
traffic  over  intranets,  the  sources 
added. 

Cisco  is  also  looking  to  roll 
out  a  device  in  this  time  frame 
that  allows  its  1000,  1600,  and 
2500  low-end  and  SOHO  Ether¬ 
net  routers  to  carry  voice  traffic, 
enabling  users  to  bypass  toll 
calls.  ■ 
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An  intranet  is  an  intranet, 
but  is  it  also  an  extranet? 


A  rose  is  a  rose  is  a  rose,  but  a  rose  by  any 
other  name  would  be  a  Red  Oblate  Spher¬ 
oid  Entity.  There’s  nothing  like  redefining 
sometliingfor  marketing  purposes. 

Thus,  it  is  with  some  irritation  —  make 
that  much  irritation  —  that  I  note  the  rise  of 
the  term  “extranet.” 

And  who  is  the  miscreant  who 
coined  thisphrasePAsfarasIcan 
determine,  the  culprit  is  Net¬ 
scape’s  Marc  Andreessen, 
who  appeared  on  ‘  ‘The 
Charlie  Rose  Show”  on  Oct. 

16, 1996  (according  to  the 
very  useful  whatis.com  site  at 
http://whatis.com) . 

Andreessen  com¬ 
pounded  his  felony 
inanews.com  (www.news.com) 
interview  dated  Sept.  6, 1996. 

Described  bynews.com  as  “the  chubby, 
baby-faced,  24-year-old  multimillionaire” 
(ouch!)  .Andreessen  is  quoted  assaying, 
“Increasingly,  a  large  part  of  our  business 
will  be  what  we  call  extranets,  which  is  com¬ 
panies  linking  up  to  other  companies.  ’  ’ 

Shame  on  you,  Marc.  When  it  comes 
down  to  it,  extranet  isjust  a  piece  of  market¬ 
ing-speak  gobbledygook  that  some  people 
with  too  much  time  on  their  keyboards  and 
a  lack  of  inspiration  are  using. 

I  am  surprised  how  few 
organizations  use 
firewalls  to  partition 
their  internal  netivorks. 

The  term  is  supposed  to  denote  a  Web 
server  that  handles  confidential  intranet 
content  and  communications  that  are  to 
be  made  available  on  the  public  Internet 
to,  for  example,  business  partners  and 
customers. 

But  hold  hard!  Is  this  not  the  same  as 
a  Web  server  with  secure  content?  Of 
course,  it  is. 

And  before  you  start  to  argue  that  an 
extranet  is  different  because  it  exists  on  a 
screened  subnet  behind  a  firewall,  well 
(duh!),  so  should  any  Web  server. 

In  fact,  I  am  surprised  how  few  organiza¬ 
tions  use  firewalls  to  partition  their  internal 
networks.  The  idea  is  simple:  Place  firewalls 
on  your  network  among  groups  or  seg¬ 
ments,  whichever  makes  sense. 

Then,  starting  with  a  firewall  configura¬ 


tion  that  lets  nothing  through,  begin 
enabling  specific  protocols  and 
connections. 

I  say  “enable ’  ’  because  many  people 
start  off  allowing  everything,  and  then  whit¬ 
tle  down  the  connections  and  protocols. 
This  is  a  bad  idea  because  you  could  inad¬ 
vertently  miss  something. 

So  with  a  partitioned  network, 
you  have  an  environment 
where,  for  example,  engi¬ 
neering  can’t  directly  access 
accounts  in  anyway  other 
than  those  you  specify. 

A  major  benefit  of  this 
strategy  is  that  any  other  con¬ 
nection  attempts  will  be 
logged  by  the  firewall.  You  can 
then  monitor  and  analyze  the  log, 
find  the  culprits,  take  them  down  to 
the  IT  group  and  torture  them  until  their 
true  intentions  are  established.  After  which, 
they  can  be  eliminated  from  the  grand  plan 
as  the  vermin  they  are.  Sorry,  I  got  a  little 
carried  away  there. 

(Wow,  a  world-class  digression.  Where 
were  we?  Oh  yes,  extranets.) 

I  keep  seeing  the  term  extranet  in  maga¬ 
zines  and  online  —  a  quick  AltaVista  search 
revealed  3,000  pages  using  the  term.  (With 
my  recendy  installed  256Kbit/sec  Hughes 
Network  Systems  IP/ Advantage  satellite 
downlink,  the  search  was  awesomely  quick. 
More  on  this  topic  later,  as  I  am  one  happy 
guy  with  this  setup. .  .but  I  digress  once 
again.) 

Our  industry’s  urge  to  peel  a  new  term 
off  any  technical  onion  that  sprouts  in  the 
computing  field  makes  my  eyes  water. 

( Beating  a  metaphor  to  death  like  that 
surely  deserves  some  kind  of  award.) 

Let  me  sum  it  up  this  way:  Concocting 
yet  another  term  for  a  completely  normal 
function  of  an  intranet  or  any  other 
system  isjust  plain  silly  and  lends  an  air 
of  false  sophistication  that  simply  confuses 
end-user  organizations.  We  don’t  need  a 
special  nameforevery  variation  andattrib- 
ute  of  IT  systems.  We  need  clear,  useful 
terms  that  technology  consumers  will 
understand. 

An  extranet  by  any  other  name  is  still  an 
intranet. 

Rant  over.  Ball’s  in  your  court,  my  friend. 
Volley  back  via  E-mail  at  mgibbs@gibbs.com,  or 
call  me  at  (800)  622-1108,  Ext.  504. 

Oh,  and  thanks for  all  of  the  replies  to  last 
week ’s  list  of  questions  and  the  previous  week ’s  col¬ 
umn  on  piracy.  If  I  haven ’t  replied  to  you  yet,  my 
apologies. . .  I  will. 


’NgJ  RJI0Z 

The  latest  on  the  Internet/intranet  industry. 


By  Chris  N  e  r  n  e  y 


REVVING  UP  AN  IPO  It’s  still  early  in  the  year,  but 

somewhat  concerned  over  the  lack  of  Internet  1 
action  in  ’97.  Sure,  it’s  good  that  investors  ha 
learned  costly  lessons  about  cyberspace 
speculation  following  last  summer’s  market 
wake-up  call.  And  yes,  Internet  start-ups 
are  wise  to  build  solid  business  models 
rather  than  cash  in  before  Dollar  One 
of  net  profit  is  even  on  the  radar  screen. 

But  we  want  some  action.  We  yearn  for 
the  heady  days  when  youthful  temerity  and 
investor  greed  prevailed  over  common 
sense.  If  things  don’t  change  soon,  we 
may  turn  to  auto  racing  to  get  our  fix  of 
the  old  crash-and-burn. 

Perhaps  the  IPO  filed  last  week  by  New  Era  of  Networks,  Inc.  (NEON) 
will  kick-start  the  reluctant  Internet  IPO  market.  Founded  in  1993  and 
based  in  Englewood,  Colo.,  NEON  designs  and  develops  application 
integration  middleware  for  networks  and  the  Internet. 

The  company  will  offer  3.3  million  shares,  according  to  lead  underwriter 
UBS  Securities.  No  estimated  price  was  given  in  the  SEC  filing.  In  1996, 
NEON  had  $7.1  million  in  revenue  and  a  net  loss  of  $5.7  million. 

$10  MILLION  HERE,  $10  MILLION  THERE  Internet  management  software  vendor 
Sequel  Technology  Corp.  has  snagged  an  additional  $10 
million  in  venture  capital  funds,  bringing  the  total  amount 
of  investments  in  the  2-year-old  Bellevue,  Wash.-based 
I  company  to  $14  million.  Olympic  Venture  Partners  was  lead 
investor  in  the  latest  round. 

Sequel  products  are  designed  to  allow  companies  to 
monitor  and  control  online  usage  of  intranets  and  the  Internet. 

BBN  REPORTS  REVENUE  INCREASE,  OPERATING  LOSSbbn  Corp.  of  Cambridge, 

Mass.,  reports  second-quarter  revenue  of  $83.9  million,  up  54%  from  the 
comparable  quarter  in  1995.  BBN  officials  say  much  of  the  increase  is  due 
to  the  growth  of  BBN  Planet,  the  company’s  national  ISP,  which  accounted 
for  47%  of  total  revenue  in  the  quarter. 

The  publicly  traded  company  continues  to  lose  money,  however.  Costs 
in  the  second  quarter  of  ’96  exceeded  operating  revenue  by  $10.5  million, 
compared  to  a  $7.4  million  operating  loss  in  Q2  ’95. 

EXTRANETS  WILL  BE  EXTRA  SPECIAL  By  the  year  2000,  extranets  will  be  critical 

to  achieving  corporate  business  objectives,  despite  the  threat  of  inadequate 
security.  That  prediction  does  not  come  from  a  highly  paid  industry  analyst, 
or  even  our  not-so-highly-paid  selves  (though  we  will  retroactively  claim 
credit  if  it  turns  out  to  be  true). 

It’s  what  members  of  InfoTEST  International  say  in  the  second  annual 
Future  of  the  Internet  Survey.  InfoTEST  is  an  alliance  of  high-tech  companies, 
labs  and  research  centers  formed  in  1993  to  test  how  the  Internet  can  be 
combined  with  other  advanced  information  technologies  to  enhance  U.S. 
business  productivity. 

InfoTEST  members  also  predict  the  vast  majority  of  existing  ISPs  will 
be  bought  out  or  go  under  by  the  year  2000,  and  that  by  the  year  2010, 
Internet  voice  telephony  will  comprise  at  least  25%  of  phone  calls  worldwide. 

A  CAST  OF  STAR  PRODUCTS  Sometime  next  month,  look  for  Starlight  Networks, 
Inc.  of  Mountain  View,  Calif.,  to  add  to  its  StarCast  video  multicasting 
software  support  for  corporate  intranets.  StarCast  officials  say  new  products 
will  include  a  viewer  for  Windows  95  and  NT  that  can  receive  and  decode 
multicast  video,  as  well  as  a  recaster  for  Windows  95  that  can  receive  encoded 
video  over  satellite  and  remulticast  it  over  a  LAN. 

Instead  of  going  to  the  Caribbean  to  shake  the  winter  blues,  try  contributing  your 
hottest  news  about  Internet  and  intranet  companies,  products,  movers  and  shakers 
to  ’ 'Net  Buzz.  No  passport  required.  Contact  Chris  Nemey  at  (508)  820-7451  or 
cnerney  @nu>w.  com. 
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Introducing  The  Virtual  IP  Network,  only  from  FTP  Software. 
Secure,  open  connections  that  extend  the  reach  of  your  business. 

Your  users  are  located  everywhere.  Just  like  your  information. 
Connecting  both  in  a  totally  open,  yet  secure,  managed  environment 
is  what  our  networking  strategy  is  all  about.  We  call  it  the  Virtual  IP 
Network  -  the  FTP  Software  family  of  products  that  provide  IS 
managers  with  new  levels  of  security,  manageability,  customization, 
and  connectivity  based  on  user  profiles  instead  of  IP  addresses. 

So  users  get  the  information  they  need,  and  you  get  the  control  you 
demand.  Imagine  the  productivity  potential.  The  cornerstones  are 
ready  now  -  OnNet®32  and  Internet  Gateway  for  NetWare  -  with 
more  to  come.  Curious  about  Virtual  IP  Networks?  Call  us  for  your 
Virtual  IP  Network  information  packet  or  visit  our  Web  site. 
1-800-282-4FTP,  ext. 5308  •  http://www.ftp.com/vip/a2l7 

FTP  Software,  the  FTP  Software  logo,  and  OnNet  are  registered  trademarks  of  FTP  Software,  Inc. 
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No  matter  how  many  locations  you  support,  our  complete  line 
of  access  products  ensures  you’ll  catch  the  perfect  solution  for 
site-to-site  connectivity  and  Internet  access. 

The  Clam™,  Access  Node®,  Access  Node  Hub™,  and  Advanced 
Remote  Node™  routers  are  ideal  for  personal  users,  small  offices 
and  remote  offices.  Need  more  power  for  a  medium-to-large 
organization?  Choose  a  highly  scalable  solution  from  our 
Backbone  Node®  family,  Access  Stack  Node™,  Marlin™  family, 
and  6300  remote  access  servers. 

Featuring  tight  security,  these  are  also  the  only  solutions 
to  offer  multiple-protocol  support  with  spoofing  and  data 
compression  to  reduce  your  WAN  tariff  costs.  Add  Optivity® 
network  management,  and  you  can  manage  multiple  routers  from 
a  central  site  and  reconfigure  them  without  network  downtime. 

For  free  product  information,  visit  our  Web  site  at 
www. baynet works. com/catch/4  or  call  1-800-8-BAYNET  ext.  278. 
And  land  the  performance  you  need  today. 


Introducing  a  fresh  approach  to  enterprise  Universal  Access. 


Catch  of  the  Day. 


IntraNet  Vendor  Showcase 


BERKELEY  SOFTWARE  DESIGN,  INC. 

Berkeley  Software  Design,  Inc. 

800-800-4BSD 

ht tp : / /www .bsdi.com 


Internetworking  Specialists 

Capella  Worldwide  Networking 

800-591-4264 

http: / /www . capella . com 


Checkpoint  Software  Technologies 

800-429-4391 

http:// www . checkpoint . com 

ComNet  booth  #275 


■  Eastern 
■B  Research 

Products  as  Solutions 

Eastern  Research,  Inc. 

800-337-4374 

ht tp : / /www . erinc . com 

ComNet  booth  #2419 


i EXIDE 

ELECTRONICS 

Strategic  Power  Management" 


Exide  Electronics  Group,  Inc. 

800- 554-3448/919-872-3020 

ht tp : / /www . exide . com 

p  O  L  i  (X 

Folio  Corporation 

801- 229-6700 

http: /  / www . folio.com 

ComNet  booth  #134 

In+r*  yPlon 

If  f  IC/F  f 

InterCon  Systems  Corporation 

703-709-5500 

ht tp : / /www .intercon.com 


INTERNET  SECURITY  SYSTEMS 


Internet  Security  Systems 

800-776-2362 

http: II www . i s  s .net 


Microsystem  Software,  Inc. 

800-828-2600 

ht tp : / /www . cyberpatrol . com 

microplex 

Microplex  Systems  Ltd. 

800-665-7798 

http: II www .microplex. com 

ComNet  booth  #399 

^llk.  Momentum 

Systems  Limited 

Momentum  Systems  Limited 

609-727-0777 

ht tp : / /www .momsys . com 


YOUR  INTERMIT  fl  U  S I K  E  S  S  PARTNER 

NetPartners  Internet  Solutions 

800-723-1166/619-505-3020 

http : / /www .netpart.com 

N&RTEL 

Nortel 

800-4-NORTEL,  dept.  54 

http : / / www . nor tel .com/atm 

ComNet  booth  #1016 

OPEN  TEXT 

Intranet 

Open  Text  Corporation 

800-499-6544 

ht tp : / /www . opentext . com 


data  communications 


RAD  Data  Communications 

800-444-7234 

http : / /www . rad . com 

ComNet  booth  #1618 


Sync  Research 

71 4-588-2070 

http : / /www . sync . com 

ComNet  booth  #970 


Although  every  effort  has  been  made  to  make  this  listing  as  complete  as  possible,  Network  World  does  not  assume  liability  for  errors  or  ommissions 
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Introducing  a  fresh  approach  to  enterprise  Universal  Access. 


No  matter  how  many  locations  you  support,  our  complete  line 
of  access  products  ensures  you’ll  catch  the  perfect  solution  for 
site-to-site  connectivity  and  Internet  access. 

The  Clam™,  Access  Node®,  Access  Node  Hub™,  and  Advanced 
Remote  Node™  routers  are  ideal  for  personal  users,  small  offices 
and  remote  offices.  Need  more  power  for  a  medium-to-large 
organization?  Choose  a  highly  scalable  solution  from  our 
Backbone  Node®  family,  Access  Stack  Node™,  Marlin™  family, 
and  6300  remote  access  servers. 


Featuring  tight  security,  these  are  also  the  only  solutions 
to  offer  multiple-protocol  support  with  spoofing  and  data 
compression  to  reduce  your  WAN  tariff  costs.  Add  Optivity® 
network  management,  and  you  can  manage  multiple  routers  from 
a  central  site  and  reconfigure  them  without  network  downtime. 

For  free  product  information,  visit  our  Web  site  at 
www. baynetworks. com/catch/4  or  call  1-800-8-BAYNET  ext.  278. 
And  land  the  performance  you  need  today. 


1997  Bay  Networks.  Inc.  "People  connect  with  us**  is  a  trademark  of  Bay  Networks.  Inc. 


Come  see  us  at  ComNet  booth  #428. 
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